diff --git a/.custodian-brief.md b/.custodian-brief.md
index fc3c3f4..f89248a 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,16 +2,15 @@
 # Custodian Brief — the-custodian
 
 **Domain:** infotech  
-**Last synced:** 2026-09-28 14:34 UTC  
+**Last synced:** 2026-09-28 16:16 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Separate agent credentials and establish supervised privileged execution
-Progress: 1/5 done  |  workplan_id: `a98a9f34-83b4-5c8c-8107-e05f7806d50d`
+Progress: 2/5 done  |  workplan_id: `a98a9f34-83b4-5c8c-8107-e05f7806d50d`
 
 **Open tasks:**
-- ! Reject last-applied annotations on Secrets  `5abbfcae`
 - ! Rotate what was exposed  `1b41b532`
 - ► Build and hand out the agent identity  `4b88b0b7`
 - ► Fleet guidance and harness guards  `90725511`