diff --git a/.custodian-brief.md b/.custodian-brief.md
index fa3622f..c096046 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — secrets-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-06-30 13:17 UTC  
+**Last synced:** 2026-07-03 14:34 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -12,8 +12,11 @@ Progress: 2/5 done  |  workstream_id: `07ee9cee-3efb-4abc-89a8-a30436d6a601`
 
 **Open tasks:**
 - ! T02 - Stand up a dedicated Gitea bot account for the repo-scoped grant  `13a34d32`
+  *(wait: awaiting-gitea-bot-account-evidence)*
 - ! T03 - Provision the real npm token without disclosure  `746b5e7f`
+  *(wait: missing-prod-bootstrap-and-package-token-handoff-files)*
 - ! T04 - Real `npm publish` of @whynot/design through secrets-engine exec  `36b925c2`
+  *(wait: native-secrets-engine-publish-evidence-pending)*
 
 ---
 ## MCP Orientation (when available)