diff --git a/.custodian-brief.md b/.custodian-brief.md
index 1feb101..3a3f288 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,13 +2,24 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** netkingdom  
-**Last synced:** 2026-05-23 22:31 UTC  
+**Last synced:** 2026-05-23 23:24 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Platform Root Custody And OpenBao Identity Bootstrap
-Progress: 1/7 done  |  workstream_id: `6b9c25e4-1008-429a-8de6-54361872c0dd`
+### Guided Security Bootstrap Experience
+Progress: 1/7 done  |  workstream_id: `16069174-6698-4855-ad9e-5092c8571f38`
+
+**Open tasks:**
+- ► T02 - Design The First Operator Journey  `662e439b`
+- · T03 - Define King Credential Kit Output  `98aba75f`
+- · T04 - Define User Lifecycle Flows  `44766b45`
+- · T05 - Define OpenBao Ceremony UX  `53f55c99`
+- · T06 - Prototype Local Bootstrap Console  `ef1c8ee4`
+- · T07 - Define Handover And Cleanup Gates  `46c7e3dc`
+
+### King Credential And OpenBao Identity Bootstrap
+Progress: 1/8 done  |  workstream_id: `6b9c25e4-1008-429a-8de6-54361872c0dd`
 
 **Open tasks:**
 - ! T03 - Approve OpenBao Custody Mode  `56a6266a`
@@ -17,6 +28,7 @@ Progress: 1/7 done  |  workstream_id: `6b9c25e4-1008-429a-8de6-54361872c0dd`
 - · T05 - Provision First NetKingdom Admin Identity  `d2a81d7b`
 - · T06 - Bind OpenBao Admin Auth To NetKingdom IAM  `ef97f3cb`
 - · T07 - Verify Recovery, Audit, And Rotation  `aa40cbb4`
+- · T08 - Reset, Rotate, And Reopen Under King Oversight  `e6a60dca`
 
 ---
 ## MCP Orientation (when available)