diff --git a/.custodian-brief.md b/.custodian-brief.md
index dd7340b..55d92d6 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,17 +2,15 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-10-14 10:58 UTC  
+**Last synced:** 2026-10-14 16:36 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Coordinate audit-core temporary custody and recovery exercises
-Progress: 2/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
+Progress: 3/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
 
 **Open tasks:**
-- ! T02 — Define the runtime database lease recovery exercise  `fda4262a`
-  *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
 - ! T03 — Define the coordinated railiance01 reboot exercise  `ba729d18`
   *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
 
@@ -26,13 +24,11 @@ Progress: 4/6 done  |  workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e`
   *(wait: Owner work first: the OpenBao owner confirms mount/path/fields and writer/reader authority and publishes the non-secret routing receipt; the handoff enters the attended window only when a command exists.)*
 
 ### Admit the Playwright pilot and establish scoped consumer group access
-Progress: 4/6 done  |  workplan_id: `31933d08-c877-5fda-aff9-6220c3705c92`
+Progress: 5/6 done  |  workplan_id: `31933d08-c877-5fda-aff9-6220c3705c92`
 
 **Open tasks:**
 - ! Connect platform identities and prove managed consumer operation  `a82762eb`
   *(wait: User admitted all identified platform humans and coding agents; their supported Kubernetes authentication/group-mapping route remains unimplemented.)*
-- ! Obtain Custodian coordination of self-service consumer delivery  `ef6c21bc`
-  *(wait: Await Custodian coordination acceptance, accountable coordinator and source task links for the existing cross-repository delivery.)*
 
 ### ArgoCD phase B: adopt the four existing Applications on railiance01
 Progress: 5/8 done  |  workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc`
diff --git a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
index 6f50245..f87415c 100644
--- a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
+++ b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
@@ -471,3 +471,16 @@ Follow-ups (owners, not blocking T02): guard revocation on Secret refreshTime +
 container startedAt (audit-core/rapp-postgres); ESO refresh interval equals role TTL
 (audit-core/ESO); ops-warden strip OPENBAO_TOKEN; founder: revoke/remove the standing
 shell-profile OPENBAO_TOKEN.
+
+T03 pre-window gates cleared 2026-10-14 (founder GO in session):
+- Stuck drill PVC `platform-pg-drill/platform-pg-drill-1` (rapp-postgres drill scratch,
+  deletion requested 2026-08-13, namespace and CNPG owner gone, no pod or attachment):
+  the API refused to patch an object in a missing namespace, so the empty namespace was
+  recreated, the pvc-protection finalizer removed, the claim and its local-path PV
+  (reclaim Delete) released, and the namespace deleted again. The node-reboot preflight
+  now passes its terminating-PVC check without `--accept-terminating-pvc`.
+- Founder waiver: the fresh-backup recommendation for `state-hub-db`, `user-engine-pg`,
+  `net-kingdom-pg` and `target-revenue-pg` (no CNPG backup configured) is waived for the
+  T03 reboot window. A reboot keeps their local-path PVCs; the preflight's per-cluster
+  UID/PVC-UID/systemID comparison detects any re-bootstrap. platform-pg's fresh backup
+  remains required. Configuring backups for those clusters stays with their owners.