diff --git a/.custodian-brief.md b/.custodian-brief.md
new file mode 100644
index 0000000..a8823a4
--- /dev/null
+++ b/.custodian-brief.md
@@ -0,0 +1,25 @@
+<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
+# Custodian Brief — security-canon
+
+**Domain:** infotech  
+**Last synced:** 2026-09-20 18:33 UTC  
+**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
+
+## Active Workstreams
+
+### Bootstrap security-canon and plan the InfoTechCanon security extraction
+Progress: 1/5 done  |  workplan_id: `72c0e8f7-c904-59bd-9a7f-55d6de8ac715`
+
+**Open tasks:**
+- ! Migration workplan handoff  `387bfae1`
+- · Disposition review of InfoTechCanon security material  `8b9e4cd0`
+- · Reference-impact survey  `dd8bc579`
+- · Federation interface card and reciprocal navigation  `a844ccdc`
+
+---
+## MCP Orientation (when available)
+
+If the state-hub MCP server is reachable, call:
+`get_domain_summary("infotech")`
+This provides richer cross-domain context.
+If the MCP call fails, use this file as your orientation source.