72b9af5049
Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for access-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
56 lines
2.6 KiB
Markdown
56 lines
2.6 KiB
Markdown
<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
|
|
# Custodian Brief — access-engine
|
|
|
|
**Domain:** infotech
|
|
**Last synced:** 2026-10-03 17:47 UTC
|
|
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
|
|
|
|
## Active Workstreams
|
|
|
|
### The decision record has a declared emission guarantee and nothing that delivers it
|
|
Progress: 2/6 done | workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
|
|
|
|
**Open tasks:**
|
|
- ! 2. Register flex-auth as an audit-core sender `89661908`
|
|
*(wait: audit-core intake: sender registration, evidence_kind and heartbeat classes as cadence.yaml publishes them; gate is a registered sender.)*
|
|
- ! 4. Close G2 `423b3090`
|
|
*(wait: Closing G2 needs the silence-finding gate, which needs T05's sender and T06's reconciliation.)*
|
|
- ! 5. Heartbeat and drain to audit-core `14bd6648`
|
|
*(wait: Per-class heartbeat sender and drain need the registered sender from T02.)*
|
|
- ! 6. Reconciliation, profile check, and storage `bf92a951`
|
|
*(wait: Reconciliation compare needs audit-core GET /v1/reconciliation, which exists only once T02's sender is registered.)*
|
|
|
|
### Repository identity migration from flex-auth to access-engine
|
|
Progress: 10/11 done | workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
|
|
|
|
**Open tasks:**
|
|
- ! 11. Soak, hand off residuals, and clean up the old checkout `46d8318b`
|
|
*(wait: Soak window after T10; destructive cleanup needs separate human approval.)*
|
|
|
|
### Admit scoped human review for the three T03 actions
|
|
Progress: 2/3 done | workplan_id: `954635b2-8377-5227-ab4f-10607b2a02c6`
|
|
|
|
**Open tasks:**
|
|
- ! Verify actual human review through the native service `9417d64a`
|
|
*(wait: Needs the operator's exact signed-in account and actual human acknowledgements; synthetic policy checks are not acceptance.)*
|
|
|
|
### 2026-10-03 secret-read evaluator for ops-warden fetch checks
|
|
Progress: 1/2 done | workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
|
|
|
|
**Open tasks:**
|
|
- ! Deploy the pin (founder go required) `aa00b29f`
|
|
*(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)*
|
|
|
|
## Inbox Hygiene
|
|
|
|
**Stale unread:** 5 message(s) older than 3 day(s) — triage at session start.
|
|
**Missing thread_id:** 6 unread message(s) lack supersession chains.
|
|
- ! net-kingdom: FLEX-WP-0020-T04: net-kingdom owner work-record and deployment verification `92e9c4a5`
|
|
|
|
---
|
|
## MCP Orientation (when available)
|
|
|
|
If the state-hub MCP server is reachable, call:
|
|
`get_domain_summary("infotech")`
|
|
This provides richer cross-domain context.
|
|
If the MCP call fails, use this file as your orientation source.
|