diff --git a/.custodian-brief.md b/.custodian-brief.md
index 140d903..56ae9a6 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,38 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-09-28 21:42 UTC  
+**Last synced:** 2026-09-29 19:40 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Onboard rapp-policy-nexus to the ArgoCD production lane
+Progress: 2/5 done  |  workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c`
+
+**Open tasks:**
+- ! Prepare the Application and the dry-run evidence  `2afb1aac`
+  *(wait: Draft the Application only after the tenant decision in T02.)*
+- ! Adopt policy-nexus (live, founder go-ahead)  `8638fa73`
+  *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)*
+- ! Agree where policy-nexus's manifests live  `49143c5e`
+  *(wait: rapp-policy-nexus owns the tenant repository and decides manifest placement itself (RAPP-POLICY-NEXUS-WP-0002).)*
+
+### Close Forgejo primary backup coverage on Scaleway
+Progress: 3/4 done  |  workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455`
+
+**Open tasks:**
+- ! Establish primary full-archive delivery and application recovery  `a4807df0`
+  *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)*
+
+### Coordinate audit-core temporary custody and recovery exercises
+Progress: 2/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
+
+**Open tasks:**
+- ! T02 — Define the runtime database lease recovery exercise  `fda4262a`
+  *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
+- ! T03 — Define the coordinated railiance01 reboot exercise  `ba729d18`
+  *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
+
 ### ArgoCD phase B: adopt the four existing Applications on railiance01
 Progress: 2/8 done  |  workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc`
 
@@ -24,42 +51,16 @@ Progress: 2/8 done  |  workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc`
 - ! Plan phase C: retire coulombcore's ArgoCD  `55d1382f`
   *(wait: Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope.)*
 
-### Close Forgejo primary backup coverage on Scaleway
-Progress: 3/4 done  |  workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455`
-
-**Open tasks:**
-- ! Establish primary full-archive delivery and application recovery  `a4807df0`
-  *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)*
-
-### Coordinate audit-core temporary custody and recovery exercises
-Progress: 2/4 done  |  workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
-
-**Open tasks:**
-- ! T02 — Define the runtime database lease recovery exercise  `fda4262a`
-  *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
-- ! T03 — Define the coordinated railiance01 reboot exercise  `ba729d18`
-  *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
-
-### Onboard rapp-policy-nexus to the ArgoCD production lane
-Progress: 2/5 done  |  workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c`
-
-**Open tasks:**
-- ! Prepare the Application and the dry-run evidence  `2afb1aac`
-  *(wait: Draft the Application only after the tenant decision in T02.)*
-- ! Adopt policy-nexus (live, founder go-ahead)  `8638fa73`
-  *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)*
-- ! Agree where policy-nexus's manifests live  `49143c5e`
-  *(wait: rapp-policy-nexus owns the tenant repository and decides manifest placement itself (RAPP-POLICY-NEXUS-WP-0002).)*
-
 ### Close S3 service assurance and ownership gaps
 Progress: 4/7 done  |  workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84`
 
 **Open tasks:**
 - ! Produce S3 signals and prove their delivery to the evidence owner  `5351e0e4`
   *(wait: Needs a concrete receiving contract from railiance-telemetry (RTEL-WP-0002) before health transport is accepted; unmonitored state retained meanwhile.)*
+- ! Make backup freshness and recurring recovery evidence checkable  `d64446fb`
+  *(wait: Cadence/expiry come from T02; execution only through the accepted execution owner.)*
 - ! Obtain acceptance for compatibility assets and derived-record cleanup  `3b74f79c`
   *(wait: Owner-ready handoffs to railiance-forge, rapp-openbao and the ArgoCD bootstrap owner await acceptance; S3 custody contracts stay here until then.)*
-- ! Make backup freshness and recurring recovery evidence checkable  `d64446fb`
 
 ### Adopt activity-core application runtime into railiance01 GitOps
 Progress: 2/3 done  |  workplan_id: `b8cf2fc2-60c2-5d4e-a60a-55f1304d9f54`
@@ -116,6 +117,10 @@ Progress: 2/3 done  |  workplan_id: `6f8a6cbc-c076-5f0a-ade2-281a7ec71360`
 **Open tasks:**
 - ! T03 — Complete the attended operator cutover  `99f8b41f`
 
+## Inbox Hygiene
+
+**Missing thread_id:** 1 unread message(s) lack supersession chains.
+
 ---
 ## MCP Orientation (when available)