diff --git a/.custodian-brief.md b/.custodian-brief.md
index 27ba259..ab86325 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,19 +2,11 @@
 # Custodian Brief — ops-mason
 
 **Domain:** infotech  
-**Last synced:** 2026-10-06 12:02 UTC  
+**Last synced:** 2026-10-06 12:03 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Place the KeyCape secrets-engine-openbao client secret in OpenBao
-Progress: 1/4 done  |  workplan_id: `d9be08f5-a0f5-5cd1-8f87-0a6868661d77`
-
-**Open tasks:**
-- ! Founder approval  `4329bcd1`
-- ! Owner changes delivered  `f59fae58`
-- · Verify and propose the route  `01f55a4d`
-
 ### Describe every stored credential so the store is navigable
 Progress: 0/4 done  |  workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`
 
@@ -59,6 +51,14 @@ Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
 - ! Review on 2026-12-21  `49dd5f9a`
   *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
 
+### Place the KeyCape secrets-engine-openbao client secret in OpenBao
+Progress: 1/4 done  |  workplan_id: `d9be08f5-a0f5-5cd1-8f87-0a6868661d77`
+
+**Open tasks:**
+- ! Founder approval  `4329bcd1`
+- ! Owner changes delivered  `f59fae58`
+- · Verify and propose the route  `01f55a4d`
+
 ## Inbox Hygiene
 
 **Stale unread:** 2 message(s) older than 3 day(s) — triage at session start.