diff --git a/.custodian-brief.md b/.custodian-brief.md
index 3396894..ffd78f5 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-10-10 10:41 UTC  
+**Last synced:** 2026-10-10 11:17 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -91,7 +91,7 @@ Progress: 3/4 done  |  workplan_id: `0c7e3b0c-1c36-568c-af51-b06f912a0f1d`
   *(wait: Platform preparation and founder design choice are complete. Independent informed-decision runtime source/publication, KeyCape custody/registration/issuance, secrets-engine consumer custody coordinates and provider setup-link handoff remain; dependency-requirements.md names the exact owner deliveries.)*
 
 ### Implement reviewed credential lanes with separate owner gates
-Progress: 3/9 done  |  workplan_id: `975db491-5412-5e27-8e34-14a2417bb039`
+Progress: 3/10 done  |  workplan_id: `975db491-5412-5e27-8e34-14a2417bb039`
 
 **Open tasks:**
 - ! Accept and provision secrets-engine service JWT login  `e0c82ea9`
@@ -106,6 +106,7 @@ Progress: 3/9 done  |  workplan_id: `975db491-5412-5e27-8e34-14a2417bb039`
   *(wait: Provisioned and delivered 2026-09-11 (CCR-2026-0021/0022 applied); do not repeat. Receiver rollout with evidence_kind and native producer acceptance passed 2026-09-11. Remaining human acceptance: independent archive readback and revocation of the interim audit bearer tokens.)*
 - ! Founder approval of the CCR-2026-0033 custody child  `7c753be6`
   *(wait: Waits for founder approvals: A1 ops-mason design (keycape-secrets-engine-openbao-client-custody, MASON-WP-0009); A2 revised CCR-2026-0033 plus sibling operator reader CCR-2026-0034 (platform-owner, key-cape-owner, net-kingdom-owner reviews; bound claims confirmed for both readers incl. groups=net-kingdom-admins and /assurance/level=aal2); A3 the exact custody-child decision id recorded in the CCR-2026-0033 review (not boundary decision 632a8893). secrets-engine D1-D4 are superseded (no consumer copy).)*
+- ! Retire the approval-engine-operator client delivery and custody (CCR-2026-0018)  `af2d4dba`
 
 ### Coordinate KeyCape live Secret exposure recovery
 Progress: 4/6 done  |  workplan_id: `038bc3c0-4492-5b91-95eb-ae515ca205df`