Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for access-engine Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
3.1 KiB
Custodian Brief — access-engine
Domain: infotech
Last synced: 2026-10-11 18:38 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)
Active Workstreams
The decision record has a declared emission guarantee and nothing that delivers it
Progress: 5/9 done | workplan_id: 84f5d9fe-b4c9-584a-b964-efe3e48af095
Open tasks:
- ! 2. Register flex-auth as an audit-core sender
89661908(wait: AUDIT-IN-0006 sender rows and governed token delivery remain pending; gate-house GH-WP-0004-T12 must rule on the load-bearing failure-path exception.) - ! 4. Close G2
423b3090(wait: G2 needs T08 native heartbeat/drain and silence-finding evidence plus T06 reconciliation; local tests cannot close the delivery gap.) - ! 6. Reconciliation, profile check, and storage
bf92a951(wait: Receiver counts use accepted_at, while local counts use commit time; audit-core must supply compatible window semantics or durable acceptance timestamps before a valid comparator can be implemented.) - ! 8. Admit and exercise native heartbeat/drain delivery
b3b52b30(wait: Needs admitted sender/token mounts, founder approval of exact image/PVC/network rollout, and audit-core observer evidence; no production delivery is enabled.)
Runtime rename: flex-auth to access-engine, run side by side, consumers switch one at a time
Progress: 0/8 done | workplan_id: af0f8d77-af04-569b-8e79-6c47eb8f1087
Open tasks:
- ► Decide the target names and supersede the retain table
4f9a796d - ► Inventory every consumer reference and open handoffs
8f597899 - ► Rename the source
ff7fd369 - · Make the PDP accept both names
487525e5 - · Stand up the access-engine namespace next to flex-auth
13b93d7a - · Consumers switch over, one at a time
f0470e5c - · Retire the flex-auth runtime
e46c9c8e - … and 1 more open tasks
Repository identity migration from flex-auth to access-engine
Progress: 10/11 done | workplan_id: 99a661a8-b36c-5c1c-b78b-1e8930bcd0a9
Open tasks:
- ! 11. Soak, hand off residuals, and clean up the old checkout
46d8318b(wait: Needs SBOM-IN-0001 catch-up receipt, secrets-engine coordinate correction and railiance-fabric residual disposition, observed soak evidence, and exact checkout cleanup approval under e071b34e-c4d4-49d0-824d-2c58bb0ae496.)
2026-10-03 secret-read evaluator for ops-warden fetch checks
Progress: 1/2 done | workplan_id: 60941288-d1f8-58fe-ad38-d508b7d5eac2
Open tasks:
- ! Deploy the pin (founder go required)
aa00b29f(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)
Inbox Hygiene
Stale unread: 2 message(s) older than 3 day(s) — triage at session start. Missing thread_id: 2 unread message(s) lack supersession chains.
MCP Orientation (when available)
If the state-hub MCP server is reachable, call:
get_domain_summary("infotech")
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.