diff --git a/.custodian-brief.md b/.custodian-brief.md
index a050618..cb58108 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,15 +2,16 @@
 # Custodian Brief — ops-mason
 
 **Domain:** infotech  
-**Last synced:** 2026-10-18 10:05 UTC  
+**Last synced:** 2026-10-18 10:31 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Restore ops-mason as the OpenBao builder: the ops-mason-construct grant
-Progress: 4/6 done  |  workplan_id: `384b3efc-f9a5-5ea9-b224-0ce900e79804`
+Progress: 4/7 done  |  workplan_id: `384b3efc-f9a5-5ea9-b224-0ce900e79804`
 
 **Open tasks:**
+- ! Submit CCRs from approved plans (RPF-WP-0061)  `ebc420c6`
 - · Executor and post-build check  `7b7a436f`
 - · Close the Kubernetes variant  `feb17422`
 
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index b347429..ef01d46 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -101,6 +101,7 @@
 | task | MASON-WP-0015-T04 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
 | task | MASON-WP-0015-T05 | done | — | workplans/MASON-WP-0015-construct-grant.md |
 | task | MASON-WP-0015-T06 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
+| task | MASON-WP-0015-T07 | wait | — | workplans/MASON-WP-0015-construct-grant.md |
 | intake | MASON-IN-0001 | closed | green | intakes/intakes.md |
 | intake | MASON-IN-0002 | closed | — | intakes/intakes.md |
 | intake | MASON-IN-0003 | open | — | intakes/intakes.md |
diff --git a/workplans/MASON-WP-0015-construct-grant.md b/workplans/MASON-WP-0015-construct-grant.md
index 9bb60ec..6b1aab7 100644
--- a/workplans/MASON-WP-0015-construct-grant.md
+++ b/workplans/MASON-WP-0015-construct-grant.md
@@ -125,6 +125,7 @@ the Pod and Secret kinds. Record the result in INTENT.md's
 id: MASON-WP-0015-T07
 status: wait
 priority: medium
+state_hub_task_id: "ebc420c6-be1a-5abb-b766-fda0bdf2680b"
 ```
 
 railiance-platform RPF-WP-0061 makes ops-mason the only CCR submitter