diff --git a/.custodian-brief.md b/.custodian-brief.md
index 8fae6fd..04aaa23 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,20 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-10-08 17:36 UTC  
+**Last synced:** 2026-10-08 20:19 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Follow through on KnownSecurityCases along their type's route
+Progress: 0/4 done  |  workplan_id: `f7e81013-6868-5d99-8528-ba75a442eca9`
+
+**Open tasks:**
+- ! Tasks  `ef0920fc`
+- ! T01 — Define the type's follow-through section  `5f68c991`
+- ! T02 — Plan a case run  `bcbf6c91`
+- ! T03 — Run and verify a case  `4a0fa4a7`
+
 ### Route supplier credentials under platform/suppliers
 Progress: 0/3 done  |  workplan_id: `16aac061-977a-536b-a074-aba059f2475f`