<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — activity-core

**Domain:** infotech  
**Last synced:** 2026-07-21 22:49 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### SSO access control for ops console and Temporal UI
Progress: 2/8 done  |  workplan_id: `c4e48358-df12-4bf4-9916-0e93f05f5fcf`

**Open tasks:**
- ! Task: Keycloak client and group membership  `b14e1f2c`
- ► Task: Ingress + TLS for ops API (read path)  `7084f7d5`
- ► Task: Ingress + SSO for Temporal Web UI  `99b36f31`
- ► Task: Map SSO identity into ops mutations  `77fff202`
- ► Task: Docs and runbook cutover  `c5945e64`
- · Task: Verify and harden  `f73eafbf`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("infotech")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.