diff --git a/.custodian-brief.md b/.custodian-brief.md
index db7c210..4528fbf 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-infra
 
 **Domain:** financials  
-**Last synced:** 2026-08-12 01:29 UTC  
+**Last synced:** 2026-08-15 13:41 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -16,14 +16,16 @@ Progress: 0/3 done  |  workplan_id: `7122657f-87c8-46b5-a725-a1af1ba0af12`
 - · T03 — Record infrastructure operations labor and exit inputs  `8bdaa96f`
 
 ### Firewall declared-state integrity and k3s API exposure
-Progress: 1/6 done  |  workplan_id: `ebf3c8d1-9066-4f13-a2d5-1da0409f2162`
+Progress: 5/6 done  |  workplan_id: `ebf3c8d1-9066-4f13-a2d5-1da0409f2162`
 
 **Open tasks:**
-- ► Tasks  `7d91dfc2`
-- · Tasks  `3e835b96`
-- · Tasks  `908630e8`
-- · Tasks  `81af8470`
-- · Tasks  `764adf9e`
+- ! Tasks  `7d91dfc2`
+
+## Inbox Hygiene
+
+**Stale unread:** 1 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 1 unread message(s) lack supersession chains.
+- ! resource-control: RAIL-HO-WP-0008 resource evidence handoff  `aa7a852b`
 
 ---
 ## MCP Orientation (when available)