diff --git a/.custodian-brief.md b/.custodian-brief.md
index 6ca3bb9..67be020 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-10-03 06:13 UTC  
+**Last synced:** 2026-10-03 06:30 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -84,13 +84,13 @@ Progress: 3/8 done  |  workplan_id: `975db491-5412-5e27-8e34-14a2417bb039`
 - ! Implement the platform operator-write CCR contract and Fluid lane  `f47e5bc5`
   *(wait: Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema.)*
 - ! Accept and provision secrets-engine service JWT login  `e0c82ea9`
-  *(wait: KEY-WP-0009 finished; remaining gate is human: attended platform provisioning of the exact JWT mount/role/policy; KeyCape issuer/JWKS and service registration under KEY-WP-0009.)*
+  *(wait: SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client secrets-engine-openbao and its protected client-credential custody (contract: separate approved custody action; no owning task id yet, asked key-cape 2026-10-03). The design requires both before any write; then a reviewed child and the attended founder apply.)*
 - ! Admit the separate approval client-side readers  `68bff751`
   *(wait: INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable.)*
 - ! Dispose of the ungoverned whynot-design npm duplicate  `0dd7c9a5`
   *(wait: Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision.)*
 - ! Admit the two factory audit-sender custody lanes  `0ef52c26`
-  *(wait: Provisioned and delivered 2026-09-11 (CCR-2026-0021/0022 applied); do not repeat. Remaining: native delivery/receiver-ingestion acceptance (receiver image must carry evidence_kind; Approval Engine namespace is its owner prerequisite), archive readback, and revocation of the interim audit bearer tokens.)*
+  *(wait: Provisioned and delivered 2026-09-11 (CCR-2026-0021/0022 applied); do not repeat. Receiver rollout with evidence_kind and native producer acceptance passed 2026-09-11. Remaining human acceptance: independent archive readback and revocation of the interim audit bearer tokens.)*
 
 ### Coordinate KeyCape live Secret exposure recovery
 Progress: 4/6 done  |  workplan_id: `038bc3c0-4492-5b91-95eb-ae515ca205df`