coulomb/access-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
access-engine/.custodian-brief.md
custodian-sync bbd65f95e4
Some checks are pending
CI Smoke / container-smoke (push) Waiting to run
Details
CI Smoke / host-smoke (push) Waiting to run
Details
chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-09-30:
  - update .custodian-brief.md for flex-auth

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 101414@bnt-lap001
Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6
2026-09-30 15:02:38 +02:00

3.4 KiB
Raw Blame History

Custodian Brief — flex-auth

Domain: infotech
Last synced: 2026-09-30 13:02 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

The decision record has a declared emission guarantee and nothing that delivers it

Progress: 2/6 done | workplan_id: 84f5d9fe-b4c9-584a-b964-efe3e48af095

Open tasks:

  • ! 2. Register flex-auth as an audit-core sender 89661908 (wait: audit-core intake: sender registration, evidence_kind and heartbeat classes as cadence.yaml publishes them; gate is a registered sender.)
  • ! 4. Close G2 423b3090 (wait: Closing G2 needs the silence-finding gate, which needs T05's sender and T06's reconciliation.)
  • ! 5. Heartbeat and drain to audit-core 14bd6648 (wait: Per-class heartbeat sender and drain need the registered sender from T02.)
  • ! 6. Reconciliation, profile check, and storage bf92a951 (wait: Reconciliation compare needs audit-core GET /v1/reconciliation, which exists only once T02's sender is registered.)

Repository identity migration from flex-auth to access-engine

Progress: 3/11 done | workplan_id: 99a661a8-b36c-5c1c-b78b-1e8930bcd0a9

Open tasks:

  • ! 4. Inventory consumers and create owned handoffs 9bb138e1 (wait: Handoff records exist for reuse-surface (REUSE-WP-0023), net-kingdom (NK-WP-0039), railiance-fabric (RAIL-FAB-WP-0031), user-engine (USER-WP-0034), tenant-engine, secrets-engine, ops-warden (intake). Only handoff CREATION gates T05; those plans complete after T06, not before. Created 2026-09-30 by flex-auth: policy-nexus PNEX-IN-0001, sbom-nexus SBOM-IN-0001, repo-manager RMGR-IN-0004. Remaining gate: the net-kingdom reply and the other six consumer confirmations.)
  • ! 5. Renew State Hub preflight and record approval 86fecbb6 (wait: Preflight runs once the downstream handoff inventory (T04) is complete.)
  • ! 6. Execute the Forgejo repository rename aa7ccd59 (wait: Human approval required before applying the Forge phase; preflight (T05) first.)
  • ! 7. Record the State Hub identity rebind 155041ed (wait: state-hub owns the statehub-rebound mutation after the Forge phase (T06).)
  • ! 8. Establish and register a fresh canonical clone c8afe078 (wait: Fresh access-engine clone and registration after the rebind (T07).)
  • ! 9. Verify identity, history, routes, builds, and deployments fdb50a96 (wait: Relationship-checksum verification after T08; each external owner supplies its evidence.)
  • ! 10. Exercise rollback decision points 3dc49eb4 (wait: Continue/pause/rollback decision at each phase; needs T09 verification.)
  • … and 1 more open tasks

Admit scoped human review for the three T03 actions

Progress: 2/3 done | workplan_id: 954635b2-8377-5227-ab4f-10607b2a02c6

Open tasks:

  • ! Verify actual human review through the native service 9417d64a (wait: Needs the operator's exact signed-in account and actual human acknowledgements; synthetic policy checks are not acceptance.)

Inbox Hygiene

Missing thread_id: 3 unread message(s) lack supersession chains.

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.