diff --git a/.custodian-brief.md b/.custodian-brief.md
index dbb076d..f9dfed3 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,18 +2,11 @@
 # Custodian Brief — secrets-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-09-05 23:30 UTC  
+**Last synced:** 2026-09-06 12:21 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Production-safe provisioning, authorization, and lifecycle hardening
-Progress: 5/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`
-
-**Open tasks:**
-- ! Bind approvals to exact production actions  `4b58edec`
-- ! Resume native production lane adoption  `a0a1dd92`
-
 ### Evolve the Lifecycle engine to the accepted security layer model
 Progress: 4/6 done  |  workplan_id: `9c9e5164-b2f5-5ea2-a557-5368d65e9fe0`
 
@@ -21,6 +14,13 @@ Progress: 4/6 done  |  workplan_id: `9c9e5164-b2f5-5ea2-a557-5368d65e9fe0`
 - ! Consume access-engine decision records  `3eb9cff8`
 - ! No standing engine credential  `d7bc8bdc`
 
+### Production-safe provisioning, authorization, and lifecycle hardening
+Progress: 5/7 done  |  workplan_id: `68a39be1-bd9c-5133-ad64-e7bca892aaf3`
+
+**Open tasks:**
+- ! Bind approvals to exact production actions  `4b58edec`
+- ! Resume native production lane adoption  `a0a1dd92`
+
 ### Adopt concrete OpenBao credential lanes from ops-warden
 Progress: 4/6 done  |  workplan_id: `31f7f8ea-7f73-516c-8877-f03a13f1db82`