diff --git a/.custodian-brief.md b/.custodian-brief.md
index 42ebe6c..551aaf7 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,17 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-07-16 21:22 UTC  
+**Last synced:** 2026-07-16 22:10 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Tenant secret custody — NetKingdom pattern for client/tenant secrets
+Progress: 6/7 done  |  workplan_id: `85b18255-d6a7-4c5e-bae0-e5b5bbc43757`
+
+**Open tasks:**
+- ! T05 — Founder provision (Red) + first scan evidence  `0f56a6ef`
+
 ### Tamper-resistant credential governance + mass rotation/lockdown (Strand B)
 Progress: 0/3 done  |  workplan_id: `7d697c52-766a-4562-b2ad-a722880bcdcb`