diff --git a/.custodian-brief.md b/.custodian-brief.md
index d197a22..bbf7e64 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,13 +2,12 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-08-20 21:29 UTC  
+**Last synced:** 2026-08-20 21:33 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### llm-connect OpenRouter Provider Key Lane
-Progress: 7/7 done  |  workplan_id: `f364d405-a85d-4b89-b600-1964ab436cad`
+*(none — repo may need first-session setup)*
 
 ---
 ## MCP Orientation (when available)
diff --git a/credential-change-requests/CCR-2026-0013-core-hub-runtime-api-token.yaml b/credential-change-requests/CCR-2026-0013-core-hub-runtime-api-token.yaml
index e05c5d6..36bb20e 100644
--- a/credential-change-requests/CCR-2026-0013-core-hub-runtime-api-token.yaml
+++ b/credential-change-requests/CCR-2026-0013-core-hub-runtime-api-token.yaml
@@ -113,3 +113,6 @@ lifecycle:
 state_hub:
   workplan_id: RPF-WP-0021
   task_id: RPF-WP-0021-T04
+  decision_id: 4f70311b-a4c4-4959-b1a1-cdd1be97d523
+  decision_api_url: http://127.0.0.1:8000/decisions/4f70311b-a4c4-4959-b1a1-cdd1be97d523
+  decision_dashboard_url: http://127.0.0.1:3000/decisions
diff --git a/workplans/RPF-WP-0021-core-hub-platform-onboarding.md b/workplans/RPF-WP-0021-core-hub-platform-onboarding.md
index 19f1390..aefdd8e 100644
--- a/workplans/RPF-WP-0021-core-hub-platform-onboarding.md
+++ b/workplans/RPF-WP-0021-core-hub-platform-onboarding.md
@@ -231,7 +231,9 @@ minutes. The database store and all projections passed railiance01 server-side
 dry-run. The package namespace is live with the reviewed `platform-pg` client
 label. Live role/store activation correctly stopped because the current
 OpenBao session receives 403 and CCR-2026-0013 is still proposed; no authority
-or placeholder Secret was improvised.
+or placeholder Secret was improvised. State Hub decision
+`4f70311b-a4c4-4959-b1a1-cdd1be97d523` now carries the non-secret review
+coordinates and awaits the required platform-operator/Core-Hub-owner approval.
 
 ## T05 — Support the private shadow restore and verification