diff --git a/.custodian-brief.md b/.custodian-brief.md
index a98fed7..a692ba3 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-clock
 
 **Domain:** infotech  
-**Last synced:** 2026-09-24 13:44 UTC  
+**Last synced:** 2026-09-28 21:20 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -12,23 +12,31 @@ Progress: 1/6 done  |  workplan_id: `5af117db-3721-509a-a3a6-36ae6bab7af3`
 
 **Open tasks:**
 - ! Integrate the clock prerequisite into the new-estate bootstrap path  `584440e4`
+- ! Deploy on railiance01 and prove drift, recovery and rollback  `1b9fa2cb`
+- ! Package private authority service and admitted trust delivery  `bc07711b`
 - ! Transfer operational responsibility and gate consumer adoption  `c2edb898`
-- ► Implement declarative host UTC discipline and verification  `f3eea5a7`
-- ► Deploy on railiance01 and prove drift, recovery and rollback  `1b9fa2cb`
-- ► Package private authority service and admitted trust delivery  `bc07711b`
+- ! Implement declarative host UTC discipline and verification  `f3eea5a7`
+
+### Admit railiance01 pilot and migrate one consumer
+Progress: 1/4 done  |  workplan_id: `558f178b-1b2c-58e1-b45b-2a8a7f773790`
+
+**Open tasks:**
+- ! Measure and verify the native authority/client pilot  `28b4c1e0`
+- ! Migrate one explicitly admitted security consumer  `2d7b4769`
+- ! Prepare private placement and trust custody  `a4040b78`
 
 ### Review time authority, trust and consumer contracts
 Progress: 0/4 done  |  workplan_id: `8a320731-32a6-5d33-9517-2242a05c0d30`
 
 **Open tasks:**
-- ► Confirm ecosystem ownership and security role  `437734bd`
-- ► Specify authenticated samples and trust lifecycle  `5f7dd460`
-- ► Specify measured clock bounds and platform lifecycle  `8038f9ee`
-- · Adopt consumer and audit time semantics  `53d248c0`
-
-## Inbox Hygiene
-
-**Stale unread:** 1 message(s) older than 3 day(s) — triage at session start.
+- ! Confirm ecosystem ownership and security role  `437734bd`
+  *(wait: Gate-house review, registry/custodian prefix confirmation and architecture disposition of rapp coverage versus host-service delivery.)*
+- ! Specify authenticated samples and trust lifecycle  `5f7dd460`
+  *(wait: NK-WP-0040 execution receipt; infrastructure/platform/trust owners accept the source/leap, custody and epoch/rollback contract.)*
+- ! Specify measured clock bounds and platform lifecycle  `8038f9ee`
+  *(wait: Infrastructure and supported-platform owners accept measured timer/error/suspend assumptions; no universal VM drift bound inferred.)*
+- ! Adopt consumer and audit time semantics  `53d248c0`
+  *(wait: access-engine (runtime flex-auth), approval-engine, secrets-engine and audit-core return accepted contract versions and native boundary/CAS evidence.)*
 
 ---
 ## MCP Orientation (when available)