1f4451298b
Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for access-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
61 lines
3.1 KiB
Markdown
61 lines
3.1 KiB
Markdown
<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
|
|
# Custodian Brief — access-engine
|
|
|
|
**Domain:** infotech
|
|
**Last synced:** 2026-10-11 14:45 UTC
|
|
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
|
|
|
|
## Active Workstreams
|
|
|
|
### Runtime rename: flex-auth to access-engine, run side by side, consumers switch one at a time
|
|
Progress: 0/8 done | workplan_id: `af0f8d77-af04-569b-8e79-6c47eb8f1087`
|
|
|
|
**Open tasks:**
|
|
- ► Decide the target names and supersede the retain table `4f9a796d`
|
|
- ► Inventory every consumer reference and open handoffs `8f597899`
|
|
- ► Rename the source `ff7fd369`
|
|
- · Make the PDP accept both names `487525e5`
|
|
- · Stand up the access-engine namespace next to flex-auth `13b93d7a`
|
|
- · Consumers switch over, one at a time `f0470e5c`
|
|
- · Retire the flex-auth runtime `e46c9c8e`
|
|
- … and 1 more open tasks
|
|
|
|
### The decision record has a declared emission guarantee and nothing that delivers it
|
|
Progress: 5/9 done | workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
|
|
|
|
**Open tasks:**
|
|
- ! 2. Register flex-auth as an audit-core sender `89661908`
|
|
*(wait: AUDIT-IN-0006 sender rows and governed token delivery remain pending; gate-house GH-WP-0004-T12 must rule on the load-bearing failure-path exception.)*
|
|
- ! 4. Close G2 `423b3090`
|
|
*(wait: G2 needs T08 native heartbeat/drain and silence-finding evidence plus T06 reconciliation; local tests cannot close the delivery gap.)*
|
|
- ! 6. Reconciliation, profile check, and storage `bf92a951`
|
|
*(wait: Receiver counts use accepted_at, while local counts use commit time; audit-core must supply compatible window semantics or durable acceptance timestamps before a valid comparator can be implemented.)*
|
|
- ! 8. Admit and exercise native heartbeat/drain delivery `b3b52b30`
|
|
*(wait: Needs admitted sender/token mounts, founder approval of exact image/PVC/network rollout, and audit-core observer evidence; no production delivery is enabled.)*
|
|
|
|
### Repository identity migration from flex-auth to access-engine
|
|
Progress: 10/11 done | workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
|
|
|
|
**Open tasks:**
|
|
- ! 11. Soak, hand off residuals, and clean up the old checkout `46d8318b`
|
|
*(wait: Needs SBOM-IN-0001 catch-up receipt, secrets-engine coordinate correction and railiance-fabric residual disposition, observed soak evidence, and exact checkout cleanup approval under e071b34e-c4d4-49d0-824d-2c58bb0ae496.)*
|
|
|
|
### 2026-10-03 secret-read evaluator for ops-warden fetch checks
|
|
Progress: 1/2 done | workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
|
|
|
|
**Open tasks:**
|
|
- ! Deploy the pin (founder go required) `aa00b29f`
|
|
*(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)*
|
|
|
|
## Inbox Hygiene
|
|
|
|
**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start.
|
|
**Missing thread_id:** 2 unread message(s) lack supersession chains.
|
|
|
|
---
|
|
## MCP Orientation (when available)
|
|
|
|
If the state-hub MCP server is reachable, call:
|
|
`get_domain_summary("infotech")`
|
|
This provides richer cross-domain context.
|
|
If the MCP call fails, use this file as your orientation source.
|