diff --git a/.custodian-brief.md b/.custodian-brief.md
index 3e078c9..70f073f 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — inter-hub
 
 **Domain:** inter_hub  
-**Last synced:** 2026-06-16 21:09 UTC  
+**Last synced:** 2026-06-21 14:07 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Current Goal
@@ -37,7 +37,7 @@ Progress: 0/1 done  |  workstream_id: `9e7a50b4-da7f-4df9-9154-7b89a071f520`
 
 **Open tasks:**
 - ! Fix COUNT decode failures in v2 bootstrap endpoints  `cceee9f1`
-  *(wait: Image publication/deploy requires authenticated Gitea Actions workflow dispatch or inspection of the self-hosted haskelseed runner path; tags f8fde35 and 68c66b9 still return manifest unknown.)*
+  *(wait: Protected production acceptance requires an approved operator/runtime key handoff or operator-provided deploy/smoke evidence; no approved key is available in this session and unauthenticated registry manifest checks return 401.)*
 
 ---
 ## MCP Orientation (when available)