diff --git a/.custodian-brief.md b/.custodian-brief.md
index a092943..5f19e21 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,18 @@
 # Custodian Brief — user-engine
 
 **Domain:** communication  
-**Last synced:** 2026-09-27 15:55 UTC  
+**Last synced:** 2026-09-28 16:19 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Read-only account authority for Hub integration
+Progress: 1/3 done  |  workplan_id: `54d99faf-4c53-5927-a82c-feca41de2cf3`
+
+**Open tasks:**
+- · Root entitlement and mapping disposition  `23a5c211`
+- · Authenticated workload transport and private acceptance  `c5d67725`
+
 ### Follow the flex-auth to access-engine repository rename (FLEX-WP-0020 handoff)
 Progress: 1/2 done  |  workplan_id: `0b948be1-ad75-5548-b4eb-aabc8e3ae6cc`