diff --git a/.custodian-brief.md b/.custodian-brief.md
index c1e6180..441f27b 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,20 @@
 # Custodian Brief — qonto-assistant
 
 **Domain:** infotech  
-**Last synced:** 2026-07-23 11:56 UTC  
+**Last synced:** 2026-07-23 21:00 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Security hardening and scale-to-zero facade for internet exposure
+Progress: 2/7 done  |  workplan_id: `81a476ac-06d5-4e98-a2ed-1518b16863aa`
+
+**Open tasks:**
+- · Task: Replace shared-secret bearer token with key-cape identity  `f02b1cc0`
+- · Task: Register and enforce `finance.qonto.read` in flex-auth  `fce7bf0e`
+- · Task: Facade / scale-to-zero activator — design and reference implementation  `e8a87292`
+- · Task: Isolation placement request to Railiance  `7cd52269`
+- · Task: Closure review  `2a2da206`
 
 ---
 ## MCP Orientation (when available)