diff --git a/.custodian-brief.md b/.custodian-brief.md
index 8008d6b..59f9e8c 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,17 +2,19 @@
 # Custodian Brief — tenant-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-08-16 08:02 UTC  
+**Last synced:** 2026-08-16 00:52 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Production rollout of the guardrail surface
-Progress: 2/4 done  |  workplan_id: `9c4d1bb8-47a4-47ff-841f-e8f2ddd01b59`
+Progress: 0/4 done  |  workplan_id: `9c4d1bb8-47a4-47ff-841f-e8f2ddd01b59`
 
 **Open tasks:**
+- ! T02 - Wait for the flex-auth nine-action pin  `a5e6f0e5`
 - ! T03 - Apply the migration and pin the tenant-engine image  `ea509a74`
 - ! T04 - Live verification and consumer confirmation  `6e4961e2`
+- · T01 - Confirm the CI image and its digest  `2f977044`
 
 ---
 ## MCP Orientation (when available)
diff --git a/workplans/TEN-WP-0007-guardrail-production-rollout.md b/workplans/TEN-WP-0007-guardrail-production-rollout.md
index 90010d4..76195d4 100644
--- a/workplans/TEN-WP-0007-guardrail-production-rollout.md
+++ b/workplans/TEN-WP-0007-guardrail-production-rollout.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Production rollout of the guardrail surface"
 domain: infotech
 repo: tenant-engine
-status: active
+status: ready
 owner: claude
 topic_slug: tenant-guardrails
 created: "2026-08-16"