diff --git a/.custodian-brief.md b/.custodian-brief.md
index fe95e39..d63f2f8 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,31 +2,25 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-07-01 21:12 UTC  
+**Last synced:** 2026-07-01 22:09 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Credential Request and Lease Broker
-Progress: 6/10 done  |  workstream_id: `2731fece-6c49-45b8-ab8a-4ea6c04ac603`
+Progress: 7/10 done  |  workstream_id: `2731fece-6c49-45b8-ab8a-4ea6c04ac603`
 
 **Open tasks:**
-- ! T05 - Implement secure delivery modes  `66f3cd6d`
-  *(wait: OpenBao live delivery verification pending)*
 - ! T07 - Add flex-auth preflight authorization and State Hub request metadata  `1269bb58`
   *(wait: Live flex-auth/OpenBao lifecycle evidence pending)*
-- ! T09 - Verification, audit, and red-team checks  `78d1db83`
-  *(wait: Live OpenBao audit evidence pending)*
-- ! T10 - Rollout and migration  `44ce4082`
-  *(wait: Live pilot and external routing rollout pending)*
+- ► T09 - Verification, audit, and red-team checks  `78d1db83`
+- ► T10 - Rollout and migration  `44ce4082`
 
 ### OpenBao Approved Automation Delegation
-Progress: 2/5 done  |  workstream_id: `671898ef-2378-4814-b8f6-066148cdad46`
+Progress: 4/5 done  |  workstream_id: `671898ef-2378-4814-b8f6-066148cdad46`
 
 **Open tasks:**
-- ! T05 - Close the whynot-design pilot  `18f34c95`
 - ► T03 - Add non-production applier role first  `ff927a19`
-- ► T04 - Add production metadata applier with human approval gate  `414abd65`
 
 ### Issue-Core Runtime Ingestion Credential Lane
 Progress: 2/7 done  |  workstream_id: `b059c81d-96f1-451f-896f-a05cd73744a1`