.custodian-brief.md

@@ -2,17 +2,26 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-08-14 15:40 UTC  
+**Last synced:** 2026-08-13 22:42 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Provide NetKingdom self-registration and application first-login provisioning
-Progress: 4/5 done  |  workplan_id: `1638183b-e2cb-4da2-92b8-d39592d62e86`
+Progress: 2/5 done  |  workplan_id: `1638183b-e2cb-4da2-92b8-d39592d62e86`
 
 **Open tasks:**
+- ! T02 - Provide secure LLDAP self-registration orchestration  `bc220e2b`
+- ! T04 - Apply optional MFA policy safely  `cf2e4d05`
 - ! T05 - Prove both cases end to end  `5d13f9f6`
 
+### Expand user-engine platform integrations beyond the Binky MVP
+Progress: 2/4 done  |  workplan_id: `9bd05700-a839-4014-8f88-8a78f2757721`
+
+**Open tasks:**
+- ► T02 - Add invitation and verification mail delivery  `9d5f272b`
+- ► T04 - Run expanded integration failure matrix  `4c54e8e4`
+
 ### Cut over NetKingdom identity to railiance01 and retire CoulombCore
 Progress: 7/8 done  |  workplan_id: `3dadddeb-4cec-48e2-9c2c-788b26dd6e93`
 

workplans/NK-WP-0025-public-self-registration-and-application-jit.md

@@ -174,7 +174,7 @@ Client and tenant allow-list negatives also fail before mail issuance.
 
 ```task
 id: NK-WP-0025-T05
-status: wait
+status: progress
 priority: high
 state_hub_task_id: "5d13f9f6-16b1-44c9-8e1d-4630cfe60a7b"
 ```