diff --git a/.custodian-brief.md b/.custodian-brief.md
index 010e6cc..8362cf2 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,25 @@
 # Custodian Brief — ops-warden
 
 **Domain:** infotech  
-**Last synced:** 2026-07-01 21:35 UTC  
+**Last synced:** 2026-07-12 14:02 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Forgejo admin PAT OpenBao lane (CCR-2026-0006)
+Progress: 2/5 done  |  workplan_id: `5bd18d0b-88bf-4791-a940-ff62b836e6d7`
+
+**Open tasks:**
+- ! T5 — Notify downstream consumers  `24a6e98f`
+- · T3 — Platform-operator approval + metadata apply  `65dcbf2f`
+- · T4 — Attended PAT provision + verification  `bc249196`
+
+## Inbox Hygiene
+
+**Stale unread:** 11 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 9 unread message(s) lack supersession chains.
+- ! the-custodian: ACTION: railiance01 state-hub deploy for workstream caller migration  `467153f3`
+- ! secrets-engine: Re: Need the warden-sign live apply/handoff (FLEX-WP-0007 T4)  `80456912`
 
 ---
 ## MCP Orientation (when available)