diff --git a/.custodian-brief.md b/.custodian-brief.md
index 7fae64f..308951f 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -1,18 +1,25 @@
 <!-- custodian-brief: generated by fix-consistency — do not edit manually -->
 # Custodian Brief — flex-auth
 
-**Domain:** communication  
-**Last synced:** 2026-06-23 19:19 UTC  
+**Domain:** infotech  
+**Last synced:** 2026-06-23 23:45 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Ops-Warden Policy Gate Production Deployment
+Progress: 3/5 done  |  workstream_id: `358ce697-2611-4fe9-89ab-63e86ceb00fa`
+
+**Open tasks:**
+- ! T1 — Deploy production flex-auth runtime  `727573fc`
+  *(wait: Awaiting stable operator-reachable flex-auth deployment)*
+- ! T4 — Joint OpenBao + policy gate production smoke  `32a96f1c`
+  *(wait: Awaiting operator deployment and scoped VAULT_TOKEN refresh)*
 
 ---
 ## MCP Orientation (when available)
 
 If the state-hub MCP server is reachable, call:
-`get_domain_summary("communication")`
+`get_domain_summary("infotech")`
 This provides richer cross-domain context.
 If the MCP call fails, use this file as your orientation source.