diff --git a/.custodian-brief.md b/.custodian-brief.md
index 465dab6..035e7fe 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,18 @@
 # Custodian Brief — secrets-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-08-25 15:48 UTC  
+**Last synced:** 2026-08-25 15:51 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Adopt concrete OpenBao credential lanes from ops-warden
+Progress: 4/6 done  |  workplan_id: `31f7f8ea-7f73-516c-8877-f03a13f1db82`
+
+**Open tasks:**
+- ! Stage live apply and verification  `fb103f1e`
+- ! Reconcile routing ownership and retire interim proxies  `1431edae`
+
 ### Production-safe provisioning, authorization, and lifecycle hardening
 Progress: 2/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`
 
@@ -17,13 +24,6 @@ Progress: 2/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`
 - ► Make delivery sessions short-lived and explicitly closed  `36bcd64d`
 - ► Strengthen verification, readiness, and evidence  `431bc91b`
 
-### Adopt concrete OpenBao credential lanes from ops-warden
-Progress: 4/6 done  |  workplan_id: `31f7f8ea-7f73-516c-8877-f03a13f1db82`
-
-**Open tasks:**
-- ! Stage live apply and verification  `fb103f1e`
-- ! Reconcile routing ownership and retire interim proxies  `1431edae`
-
 ---
 ## MCP Orientation (when available)