diff --git a/.custodian-brief.md b/.custodian-brief.md
index ee8f10f..d508bbf 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,24 @@
 # Custodian Brief — railiance-infra
 
 **Domain:** financials  
-**Last synced:** 2026-08-22 13:12 UTC  
+**Last synced:** 2026-08-25 15:46 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Close the encrypted S1 backup and recovery loop
+Progress: 4/6 done  |  workplan_id: `5ea28f8f-376c-5230-8bb7-ca871c1a75f4`
+
+**Open tasks:**
+- ! T06 — Perform an attended isolated restore drill  `2ae6feab`
+- ► T05 — Integrate the governed write-only off-host lane  `783dff8b`
+
+### Make the S1 declaration reproducible and the handoff verifiably green
+Progress: 6/8 done  |  workplan_id: `5738f113-1c4e-5d27-95b2-b6655e0b7279`
+
+**Open tasks:**
+- ! T05 — Provide a fresh green S1 handoff gate  `ba526585`
+- ! T08 — Automate bounded SOPS recipient rotation  `920f869a`
 
 ---
 ## MCP Orientation (when available)