diff --git a/.custodian-brief.md b/.custodian-brief.md
index 456d583..226c09c 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -7,14 +7,14 @@
 
 ## Active Workstreams
 
-### Coordinate KeyCape live Secret exposure recovery
-Progress: 4/6 done  |  workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e`
+### Coordinate audit-core temporary custody and recovery exercises
+Progress: 2/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
 
 **Open tasks:**
-- ! T03 — Collect exact owner acknowledgements  `714ae011`
-  *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)*
-- ! T06 — Publish the Railiance/OpenBao custody handoff  `3b9748c4`
-  *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)*
+- ! T02 — Define the runtime database lease recovery exercise  `fda4262a`
+  *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
+- ! T03 — Define the coordinated railiance01 reboot exercise  `ba729d18`
+  *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
 
 ### ArgoCD phase B: adopt the four existing Applications on railiance01
 Progress: 2/8 done  |  workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc`
@@ -40,14 +40,14 @@ Progress: 3/4 done  |  workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455`
 - ! Establish primary full-archive delivery and application recovery  `a4807df0`
   *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)*
 
-### Coordinate audit-core temporary custody and recovery exercises
-Progress: 2/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
+### Coordinate KeyCape live Secret exposure recovery
+Progress: 4/6 done  |  workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e`
 
 **Open tasks:**
-- ! T02 — Define the runtime database lease recovery exercise  `fda4262a`
-  *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
-- ! T03 — Define the coordinated railiance01 reboot exercise  `ba729d18`
-  *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
+- ! T03 — Collect exact owner acknowledgements  `714ae011`
+  *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)*
+- ! T06 — Publish the Railiance/OpenBao custody handoff  `3b9748c4`
+  *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)*
 
 ### Close S3 service assurance and ownership gaps
 Progress: 4/7 done  |  workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84`