diff --git a/.custodian-brief.md b/.custodian-brief.md
index 5fc45b4..a0eb681 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-08-25 17:56 UTC  
+**Last synced:** 2026-08-25 18:17 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -13,6 +13,12 @@ Progress: 5/6 done  |  workplan_id: `4627d89b-4b00-562a-81e9-76e96f90fa7e`
 **Open tasks:**
 - ! Tasks  `5acac140`
 
+### Tamper-resistant credential governance + mass rotation/lockdown (Strand B)
+Progress: 2/3 done  |  workplan_id: `21528e8d-a049-523d-9ae1-da7a27cb8bbf`
+
+**Open tasks:**
+- ► Task: Graded lockdown / break-glass with explicit trust-root  `cae498ee`
+
 ## Inbox Hygiene
 
 **Stale unread:** 9 message(s) older than 3 day(s) — triage at session start.