diff --git a/.custodian-brief.md b/.custodian-brief.md
index 986c01b..59f9e8c 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,19 @@
 # Custodian Brief — tenant-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-08-16 00:20 UTC  
+**Last synced:** 2026-08-16 00:52 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Production rollout of the guardrail surface
+Progress: 0/4 done  |  workplan_id: `9c4d1bb8-47a4-47ff-841f-e8f2ddd01b59`
+
+**Open tasks:**
+- ! T02 - Wait for the flex-auth nine-action pin  `a5e6f0e5`
+- ! T03 - Apply the migration and pin the tenant-engine image  `ea509a74`
+- ! T04 - Live verification and consumer confirmation  `6e4961e2`
+- · T01 - Confirm the CI image and its digest  `2f977044`
 
 ---
 ## MCP Orientation (when available)