diff --git a/.custodian-brief.md b/.custodian-brief.md
index 2823b1f..16cdf78 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,18 @@
 # Custodian Brief — ops-mason
 
 **Domain:** infotech  
-**Last synced:** 2026-10-11 02:10 UTC  
+**Last synced:** 2026-10-11 12:01 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Check the target's readiness tier before a direct Kubernetes apply
+Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
+
+**Open tasks:**
+- ! Review on 2026-12-21  `49dd5f9a`
+  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
+
 ### Describe every stored credential so the store is navigable
 Progress: 2/4 done  |  workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`
 
@@ -32,13 +39,6 @@ Progress: 4/6 done  |  workplan_id: `483e56d6-6601-5377-9066-66225214c046`
   *(wait: After T05 verification; only ops-warden activates the entry.)*
 - ► Verify capabilities and record metadata-only evidence  `4c205be7`
 
-### Check the target's readiness tier before a direct Kubernetes apply
-Progress: 5/6 done  |  workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`
-
-**Open tasks:**
-- ! Review on 2026-12-21  `49dd5f9a`
-  *(wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)*
-
 ### Place the KeyCape secrets-engine-openbao client secret in OpenBao
 Progress: 4/5 done  |  workplan_id: `d9be08f5-a0f5-5cd1-8f87-0a6868661d77`