diff --git a/.custodian-brief.md b/.custodian-brief.md
index 5f9c5fb..ecc194b 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,12 +2,22 @@
 # Custodian Brief — ops-warden
 
 **Domain:** custodian  
-**Last synced:** 2026-05-15 15:06 UTC  
+**Last synced:** 2026-06-17 06:20 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### NetKingdom Alignment and Operational Access Stewardship
+Progress: 0/7 done  |  workstream_id: `a5c9f24b-1ad4-46da-bc8e-b99897f8e302`
+
+**Open tasks:**
+- · T1 — Credential routing runbook  `ffc6a0c2`
+- · T2 — Actor inventory patterns  `3816463d`
+- · T3 — NetKingdom cross-links (ops-warden side)  `f158366a`
+- · T4 — NetKingdom canon patch (coordination)  `e40e4395`
+- · T5 — OpenBao SSH engine operational checklist  `a94e20a2`
+- · T6 — Policy-gated signing design (design only)  `b10a4b4d`
+- · T7 — Re-assess INTENT ↔ SCOPE  `ef8b5c57`
 
 ---
 ## MCP Orientation (when available)