diff --git a/.custodian-brief.md b/.custodian-brief.md
index f13a43f..f6c368a 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — secrets-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-10-09 17:54 UTC  
+**Last synced:** 2026-10-09 18:10 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -42,7 +42,7 @@ Progress: 3/4 done  |  workplan_id: `143de42b-b568-5070-add0-d5e71eabd436`
 
 **Open tasks:**
 - ! Attended consumer-copy delivery  `1c3afd34`
-  *(wait: All upstream objects are live: CCR-2026-0033 applied, KeyCape registration live (KEY-WP-0037), CCR-2026-0038 JWT mount keycape-services / role secrets-engine-openbao applied 2026-10-08 (railiance-platform 1b36e14). Founder writes the non-secret local login contract file and runs the attended probe-openbao command in docs/keycape-openbao-consumer-custody.md.)*
+  *(wait: All upstream objects are live: CCR-2026-0033 applied, KeyCape registration live (KEY-WP-0037), CCR-2026-0038 JWT mount keycape-services / role secrets-engine-openbao applied 2026-10-08 (railiance-platform 1b36e14). Probe input ~/.secrets-engine/keycape/openbao-jwt-login.yaml written 2026-10-09 with founder approval (mode 0600, parsed by the engine loader; allowed by CCR-2026-0038 as amended in railiance-platform 93a4bc2). Founder runs the attended probe-openbao command in docs/keycape-openbao-consumer-custody.md.)*
 
 ## Inbox Hygiene