flex-auth/.custodian-brief.md

<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — flex-auth

**Domain:** infotech  
**Last synced:** 2026-09-20 22:16 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### The stance register outgrew the review that read it: five rows, and the divergence was ruled rather than resolved
Progress: 0/4 done  |  workplan_id: `5a11099d-b492-535c-af88-c334db5e8ee6`

**Open tasks:**
- · 1. Record that Finding 1 was ruled, not resolved  `5a7ed269`
- · 2. Re-run Finding 2 across five rows  `991ebb94`
- · 3. Close out Finding 3 against the current file  `6dd2c9fd`
- · 4. Propagate the row count and state the version trigger  `4dbadd0b`

### Tenant scoping is unstated in tenant-engine and untested in two more packages
Progress: 1/3 done  |  workplan_id: `804c588c-f47a-50c4-bdd7-51b24bbf9539`

**Open tasks:**
- ! 2. Encode the relation, or record that there is none  `712ac826`
- ► 1. Get the intended tenant relation from tenant-engine  `a84dcee5`

### The layer declaration pins a version it should not, and four security-relevant peers do not declare at all
Progress: 3/4 done  |  workplan_id: `abe60f5f-79cc-5857-b9e8-a46bed704279`

**Open tasks:**
- ► 4. Raise the conflicting and unclear boundaries for resolution  `70786e6d`

### Repository identity migration from flex-auth to access-engine
Progress: 3/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`

**Open tasks:**
- ! 5. Renew State Hub preflight and record approval  `86fecbb6`
- ! 6. Execute the Forgejo repository rename  `aa7ccd59`
- ! 7. Record the State Hub identity rebind  `155041ed`
- ! 8. Establish and register a fresh canonical clone  `c8afe078`
- ! 9. Verify identity, history, routes, builds, and deployments  `fdb50a96`
- ! 10. Exercise rollback decision points  `3dc49eb4`
- ! 11. Soak, hand off residuals, and clean up the old checkout  `46d8318b`
- … and 1 more open tasks

### Admit scoped human review for the three T03 actions
Progress: 2/3 done  |  workplan_id: `954635b2-8377-5227-ab4f-10607b2a02c6`

**Open tasks:**
- ! Verify actual human review through the native service  `9417d64a`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("infotech")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.