diff --git a/.custodian-brief.md b/.custodian-brief.md
index 97af14d..1c87279 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-10-09 17:46 UTC  
+**Last synced:** 2026-10-10 13:31 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -46,13 +46,6 @@ Progress: 2/3 done  |  workplan_id: `42a097db-1c24-558e-a724-030bb2b4443e`
 - ! Prove routing and publication  `a8b1b855`
   *(wait: Founder HOLD 2026-09-21: no rotation until SECRETS-WP-0006-T06 moves the publish lane off the legacy whynot-design npm path; then rotate and prove a fresh publish.)*
 
-### Preserve explicit policy caller refusals before credential and CA effects
-Progress: 2/3 done  |  workplan_id: `ae44a935-6fca-514c-a385-4550dd2b1fe8`
-
-**Open tasks:**
-- ! Resolve the credential proxy's admitted policy binding  `8ca28b63`
-  *(wait: Code side done 2026-10-03 (policy.fetch_flex_auth_url). Waits on founder go: deploy access-engine pin flex-auth-ops-warden-fetch, add tunnel flex-auth-ops-warden-fetch-railiance01, set the key in live warden.yaml, then record positive and wrong-owner evidence.)*
-
 ## Inbox Hygiene
 
 **Stale unread:** 2 message(s) older than 3 day(s) — triage at session start.