diff --git a/.custodian-brief.md b/.custodian-brief.md
index ea71b3b..fae4c2d 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,21 @@
 # Custodian Brief — railiance-master
 
 **Domain:** financials  
-**Last synced:** 2026-08-14 18:33 UTC  
+**Last synced:** 2026-08-15 17:35 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Private-by-default exposure until production admission
+Progress: 0/5 done  |  workplan_id: `50303bdf-aada-4c38-8782-d4e63b603e65`
+
+**Open tasks:**
+- ! T02 — Write the exposure contract  `96db2a2d`
+- ! T03 — Schema and validator  `03070be7`
+- ! T05 — Route enforcement work  `d780df59`
+- · T01 — Ratify the exposure rule  `40d50848`
+- · T04 — Exception snapshot for already-public surfaces  `6576cc7c`
+
 ### Migrate authoritative OpenBao from CoulombCore to reef-railiance
 Progress: 7/8 done  |  workplan_id: `0616a297-18c5-4c4e-a4fc-69135b3f9a15`