diff --git a/.custodian-brief.md b/.custodian-brief.md
index 67be020..e93dd46 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-10-03 06:30 UTC  
+**Last synced:** 2026-10-03 19:20 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -61,6 +61,13 @@ Progress: 4/7 done  |  workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84`
 - ! Obtain acceptance for compatibility assets and derived-record cleanup  `3b74f79c`
   *(wait: Owner-ready handoffs to railiance-forge, rapp-openbao and the ArgoCD bootstrap owner await acceptance; S3 custody contracts stay here until then.)*
 
+### Deliver the approved OpenBao platform-root custody fact design
+Progress: 4/5 done  |  workplan_id: `7dc1b126-1ddd-550f-9e6a-1fc577d0f27b`
+
+**Open tasks:**
+- ! Return producer delivery receipts  `871e3236`
+  *(wait: Admission, empty publication, live reader/denials/restart, audit correlation, native isolated Raft restore and remote Git history readback are verified. Only attended finish helper current owner baseline check plus governed encrypted history provider roundtrip receipt remains; existing approval persists.)*
+
 ### Adopt activity-core application runtime into railiance01 GitOps
 Progress: 2/3 done  |  workplan_id: `b8cf2fc2-60c2-5d4e-a60a-55f1304d9f54`
 
@@ -81,10 +88,10 @@ Progress: 4/6 done  |  workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e`
 Progress: 3/8 done  |  workplan_id: `975db491-5412-5e27-8e34-14a2417bb039`
 
 **Open tasks:**
-- ! Implement the platform operator-write CCR contract and Fluid lane  `f47e5bc5`
-  *(wait: Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema.)*
 - ! Accept and provision secrets-engine service JWT login  `e0c82ea9`
   *(wait: SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client secrets-engine-openbao and its protected client-credential custody (contract: separate approved custody action; no owning task id yet, asked key-cape 2026-10-03). The design requires both before any write; then a reviewed child and the attended founder apply.)*
+- ! Implement the platform operator-write CCR contract and Fluid lane  `f47e5bc5`
+  *(wait: Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema.)*
 - ! Admit the separate approval client-side readers  `68bff751`
   *(wait: INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable.)*
 - ! Dispose of the ungoverned whynot-design npm duplicate  `0dd7c9a5`