diff --git a/.custodian-brief.md b/.custodian-brief.md
index e24a4ad..09161f4 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,18 +2,11 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-10-11 18:32 UTC  
+**Last synced:** 2026-10-11 18:37 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Follow through on KnownSecurityCases along their type's route
-Progress: 2/4 done  |  workplan_id: `f7e81013-6868-5d99-8528-ba75a442eca9`
-
-**Open tasks:**
-- ! T03 — Run and verify a case  `4a0fa4a7`
-- ► T02 — Plan a case run  `bcbf6c91`
-
 ### Adopt unknown -> fail_closed behind signing-target classification coverage
 Progress: 1/4 done  |  workplan_id: `c8ee441e-1be1-5219-910c-e79ff23cc9ec`
 
@@ -32,6 +25,13 @@ Progress: 5/6 done  |  workplan_id: `ae3ff76f-883d-5e2f-b6aa-144d61e8fdef`
 - ! Tasks  `7d1b3c82`
   *(wait: Two items to route, not absorb: ops-mason has published no stance map; the second is another repository's to own.)*
 
+### Follow through on KnownSecurityCases along their type's route
+Progress: 2/4 done  |  workplan_id: `f7e81013-6868-5d99-8528-ba75a442eca9`
+
+**Open tasks:**
+- ! T03 — Run and verify a case  `4a0fa4a7`
+- ► T02 — Plan a case run  `bcbf6c91`
+
 ### Tamper-resistant credential governance + mass rotation/lockdown (Strand B)
 Progress: 2/3 done  |  workplan_id: `21528e8d-a049-523d-9ae1-da7a27cb8bbf`