diff --git a/.custodian-brief.md b/.custodian-brief.md
index 1ec07a0..0bd75c7 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,17 +2,23 @@
 # Custodian Brief — ops-mason
 
 **Domain:** infotech  
-**Last synced:** 2026-09-28 21:34 UTC  
+**Last synced:** 2026-09-28 22:27 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Check the target's readiness tier before a direct Kubernetes apply
-Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
+### Describe every stored credential so the store is navigable
+Progress: 0/4 done  |  workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`
 
 **Open tasks:**
-- ! Review on 2026-12-21  `49dd5f9a`
-  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
+- ! Establish owners before writing anything  `5bda75f2`
+  *(wait: Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet.)*
+- ! Describe the paths whose purpose is already documented  `a6a944d7`
+  *(wait: Requires a valid scoped metadata grant (operator) before the described paths can be written and verified.)*
+- ! Resolve the rest with their owners  `fff26914`
+  *(wait: Blocked on T01: owners answer what/what-breaks/what-if-lost per undescribed path.)*
+- ! Make an undescribed path visible before it accumulates  `9a0cea06`
+  *(wait: Blocked on T03.)*
 
 ### Construct the fluid-telegram operator credential lane
 Progress: 0/6 done  |  workplan_id: `483e56d6-6601-5377-9066-66225214c046`
@@ -31,18 +37,12 @@ Progress: 0/6 done  |  workplan_id: `483e56d6-6601-5377-9066-66225214c046`
 - ! Hand off routing and keep the adapter lane separate  `09eae088`
   *(wait: After T05 verification; only ops-warden activates the entry.)*
 
-### Describe every stored credential so the store is navigable
-Progress: 0/4 done  |  workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`
+### Check the target's readiness tier before a direct Kubernetes apply
+Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
 
 **Open tasks:**
-- ! Establish owners before writing anything  `5bda75f2`
-  *(wait: Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet.)*
-- ! Describe the paths whose purpose is already documented  `a6a944d7`
-  *(wait: Requires a valid scoped metadata grant (operator) before the described paths can be written and verified.)*
-- ! Resolve the rest with their owners  `fff26914`
-  *(wait: Blocked on T01: owners answer what/what-breaks/what-if-lost per undescribed path.)*
-- ! Make an undescribed path visible before it accumulates  `9a0cea06`
-  *(wait: Blocked on T03.)*
+- ! Review on 2026-12-21  `49dd5f9a`
+  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
 
 ---
 ## MCP Orientation (when available)