diff --git a/.custodian-brief.md b/.custodian-brief.md
index b81f6e5..d1c2522 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,30 @@
 # Custodian Brief — railiance-apps
 
 **Domain:** financials  
-**Last synced:** 2026-07-01 22:23 UTC  
+**Last synced:** 2026-07-10 13:13 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Core Hub Helm cutover and vergabe-teilnahme image refresh
+Progress: 0/5 done  |  workstream_id: `780c8d1d-ea75-479e-9733-10b518dde242`
+
+**Open tasks:**
+- ! Adopt Helm-managed Core Hub release  `0e591104`
+- ! Verify Core Hub post-cutover smoke  `eca3ce8b`
+- ! Post-deploy vergabe smoke and runbook evidence  `4eaaa345`
+- · Core Hub server dry-run on Railiance01  `b9dea9f3`
+- · Refresh vergabe-teilnahme production image  `d547f68d`
+
+### CNPG backup wiring and restore drill
+Progress: 0/5 done  |  workstream_id: `764c2447-0713-45d5-a14d-810a13027b8b`
+
+**Open tasks:**
+- ! Wire apps-pg backup coverage  `2d78019e`
+- ! Wire remaining production DB clusters  `d3e41204`
+- ! Run isolated restore drill with evidence  `15602bb9`
+- ! Close vergabe production-trust backup gate  `666c0a9b`
+- · Confirm backup lane and credential path  `f2051213`
 
 ---
 ## MCP Orientation (when available)