diff --git a/.custodian-brief.md b/.custodian-brief.md
index 6ddc4fc..cb74742 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — ops-mason
 
 **Domain:** infotech  
-**Last synced:** 2026-10-09 17:53 UTC  
+**Last synced:** 2026-10-09 17:55 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -16,13 +16,6 @@ Progress: 2/4 done  |  workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`
 - ! Make an undescribed path visible before it accumulates  `9a0cea06`
   *(wait: Blocked on T03.)*
 
-### Check the target's readiness tier before a direct Kubernetes apply
-Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
-
-**Open tasks:**
-- ! Review on 2026-12-21  `49dd5f9a`
-  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
-
 ### Materialize SecurityCases from their type, with acceptance as the only gate
 Progress: 2/4 done  |  workplan_id: `eabf2c39-94bd-5a11-8f2e-76d7a95d1583`
 
@@ -38,6 +31,13 @@ Progress: 4/6 done  |  workplan_id: `483e56d6-6601-5377-9066-66225214c046`
   *(wait: After T05 verification; only ops-warden activates the entry.)*
 - ► Verify capabilities and record metadata-only evidence  `4c205be7`
 
+### Check the target's readiness tier before a direct Kubernetes apply
+Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
+
+**Open tasks:**
+- ! Review on 2026-12-21  `49dd5f9a`
+  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
+
 ### Place the KeyCape secrets-engine-openbao client secret in OpenBao
 Progress: 4/5 done  |  workplan_id: `d9be08f5-a0f5-5cd1-8f87-0a6868661d77`