diff --git a/.custodian-brief.md b/.custodian-brief.md
index bc1720f..0cdf917 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — secrets-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-09-27 14:00 UTC  
+**Last synced:** 2026-09-27 14:01 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -19,7 +19,7 @@ Progress: 4/5 done  |  workplan_id: `ecb0643d-bad7-5d63-b340-e77ab9579b0a`
 
 **Open tasks:**
 - ! Catalog the Activity Core worker token lane  `cf465065`
-  *(wait: Lane cataloged; token seeded (ACTIVITY-WP-0039-T03 done 2026-09-23). Waits on T04 cutover: railiance-platform store policy and founder go-ahead. Do not apply or deliver until activity-core reports the metered identity authenticates.)*
+  *(wait: Activity Core reports ACTIVITY-WP-0039 finished and metered identity authentication proved (2026-09-24). Remaining: admit the configured Glas owner, obtain exact per-lane approvals, and perform attended native apply/verify/delivery under SECRETS-WP-0009-T03.)*
 
 ### Production-safe provisioning, authorization, and lifecycle hardening
 Progress: 5/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`
@@ -40,7 +40,7 @@ Progress: 2/3 done  |  workplan_id: `40ccc3b4-d046-5a58-8649-e7935f45c974`
 
 **Open tasks:**
 - ! Activate the approved native lane and verify real owner delivery  `f8069c8a`
-  *(wait: Shared native chain proved by SECRETS-WP-0010-T03 (2026-09-16): Approval Engine, CCR-2026-0019 reader, requester client, Informed Decision human review, current PDP. Lane-specific residue: operator inputs (placement, spend envelope/model bounds, unrelated negative identity), private SpendPolicy/ledger and owner config (HFACT-WP-0001-T01/T04), configured exec_owner, three human approvals, attended apply/verify/exec/revoke.)*
+  *(wait: Shared native chain proved by SECRETS-WP-0010-T03. Metered owner provisioned and binding drafted (2026-09-23); Activity Core reports identity live (2026-09-24). Remaining: current recipient/pin admission, unrelated negative identity, configured exec_owner, exact per-action/per-lane approvals and attended apply/verify/exec/revoke.)*
 
 ---
 ## MCP Orientation (when available)