diff --git a/.custodian-brief.md b/.custodian-brief.md
index ff0285d..62985f9 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -7,13 +7,6 @@
 
 ## Active Workstreams
 
-### KeyCape secrets-engine-openbao consumer custody acceptance
-Progress: 1/3 done  |  workplan_id: `143de42b-b568-5070-add0-d5e71eabd436`
-
-**Open tasks:**
-- ! Founder decisions D1-D4  `b95da704`
-- ! Attended consumer-copy delivery  `1c3afd34`
-
 ### Activate native Claude credential delivery for Glas
 Progress: 2/3 done  |  workplan_id: `40ccc3b4-d046-5a58-8649-e7935f45c974`
 
@@ -30,6 +23,13 @@ Progress: 4/6 done  |  workplan_id: `31f7f8ea-7f73-516c-8877-f03a13f1db82`
 - ! Reconcile routing ownership and retire interim proxies  `1431edae`
   *(wait: Needs owner-agreed routing/proxy retirement for each verified lane and custody disposition of the legacy npm pointer; a single approved OpenRouter key-check does not authorize broader routing cutover.)*
 
+### KeyCape secrets-engine-openbao consumer custody acceptance
+Progress: 1/3 done  |  workplan_id: `143de42b-b568-5070-add0-d5e71eabd436`
+
+**Open tasks:**
+- ! Founder decisions D1-D4  `b95da704`
+- ! Attended consumer-copy delivery  `1c3afd34`
+
 ### Production-safe provisioning, authorization, and lifecycle hardening
 Progress: 6/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`