SCOPE: add bwrap-fi-research profile, refresh test count; refresh brief

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 358047@bnt-lap001
Assistant-Session: fad68125-297a-449d-bfa7-cf9cdd49ca1d

.custodian-brief.md

@@ -2,7 +2,7 @@
 # Custodian Brief — sand-boxer
 
 **Domain:** infotech  
-**Last synced:** 2026-10-13 19:56 UTC  
+**Last synced:** 2026-10-13 20:56 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -12,14 +12,14 @@ Progress: 4/5 done  |  workplan_id: `b616d1cd-208f-5ecf-a4a0-a028396422c4`
 
 **Open tasks:**
 - ! Prove one governed rein and coordinate consumers  `c6812fd4`
-  *(wait: Needs a concrete Claude-compatible credential route (SAND-WP-0015-T04) before one real rein command can run through the owner API.)*
+  *(wait: Waits on SAND-WP-0015-T04: corrected runtime ee3d0a53 admission and one successful authorized owner-runtime acceptance before a real rein command runs through the owner API.)*
 
 ### Provide a pinned bwrap rein runtime and private state
 Progress: 5/6 done  |  workplan_id: `d3f12387-fd23-58f0-b979-9c811507614d`
 
 **Open tasks:**
 - ! Resolve Claude credentials, enforced egress, and production acceptance  `58817ef6`
-  *(wait: Native credential delivery/revocation succeeded in the September 27 single attempt; rein-aharness must return corrected immutable artifact/pin admission, held EUR10 reconciliation and separately authorized successful owner-runtime acceptance.)*
+  *(wait: EUR10 reconciled and retry envelope authorized 2026-10-13; rein-aharness must install/admit corrected runtime ee3d0a53 on railiance01 (pin + offline startup proof) and record the one authorized successful owner-runtime acceptance.)*
 
 ## Inbox Hygiene
 

SCOPE.md

@@ -122,13 +122,13 @@ own tunnels or CAs.
   snapshots, telemetry, HTTP API
 - **Profiles:** compose e2e/checkpoint, canary, vm-haskell-build, saas-stub,
   burst-sandbox, e2b-burst, modal-gpu, agent-dev, build, vm-packer-build,
-  bwrap-local, claude-agent-dev-proof (candidate, not production)
+  bwrap-local, bwrap-fi-research, claude-agent-dev-proof (candidate, not production)
 - **Extensions:** `ext.compose-ssh`, `ext.vm-packer`, `ext.saas-stub`,
   `ext.e2b`, `ext.modal`
 - **Docs:** `meta-framework`, `extension-sdk`, `host-telemetry`, `routing`,
   `payments`, `snapshots`, `migration-gaps`, `migration-build-machines`
 - **Registry:** `capability.execution.sandbox-provision` indexed (draft)
-- **Tests:** 172 pytest cases; `make check` green
+- **Tests:** 220 pytest cases; `make check` green
 - **Siblings:** wise-validator `validate run` (SAND-WP-0003); the-custodian
   `make e2e REPO=` shim (SAND-WP-0004)