chore(consistency): sync task status from DB [auto]

Updated by fix-consistency on 2026-06-27:
  - update .custodian-brief.md for railiance-platform

.custodian-brief.md

@@ -2,22 +2,11 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-06-27 19:35 UTC  
+**Last synced:** 2026-06-27 19:56 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Workload KV Access Lanes for ops-warden Fetch
-Progress: 1/7 done  |  workstream_id: `96c8a93d-7a5a-4fa9-8f7b-865119551da3`
-
-**Open tasks:**
-- · T02 - Add least-privilege OpenBao read policy  `9c06d531`
-- · T03 - Define and apply auth bindings  `a217371a`
-- · T04 - Provision the KV path without exposing the token  `c43724a3`
-- · T05 - Verify caller-scoped fetch behavior  `dc1f470b`
-- · T06 - Coordinate ops-warden catalog activation  `8e84ec19`
-- · T07 - Decide whether to batch sibling workload-KV requests  `0b3ab5f5`
-
 ### Credential Request and Lease Broker
 Progress: 3/10 done  |  workstream_id: `2731fece-6c49-45b8-ab8a-4ea6c04ac603`
 
@@ -37,6 +26,19 @@ Progress: 3/10 done  |  workstream_id: `2731fece-6c49-45b8-ab8a-4ea6c04ac603`
 - ! T10 - Rollout and migration  `44ce4082`
   *(wait: Live pilot and external routing rollout pending)*
 
+### Workload KV Access Lanes for ops-warden Fetch
+Progress: 3/7 done  |  workstream_id: `96c8a93d-7a5a-4fa9-8f7b-865119551da3`
+
+**Open tasks:**
+- ! T03 - Define and apply auth bindings  `a217371a`
+  *(wait: Whynot bound claim/service account not confirmed)*
+- ! T04 - Provision the KV path without exposing the token  `c43724a3`
+  *(wait: NPM_AUTH_TOKEN requires approved operator custody)*
+- ! T05 - Verify caller-scoped fetch behavior  `dc1f470b`
+  *(wait: Live policy role and secret not yet provisioned)*
+- ! T06 - Coordinate ops-warden catalog activation  `8e84ec19`
+  *(wait: Awaiting ops-warden draft catalog wiring and live verification)*
+
 ---
 ## MCP Orientation (when available)