flex-auth/.custodian-brief.md
custodian-sync 35f054c99f
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-09-21:
  - update .custodian-brief.md for flex-auth

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
2026-09-21 06:36:51 +02:00

2.8 KiB

Custodian Brief — flex-auth

Domain: infotech
Last synced: 2026-09-21 04:36 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

The decision record has a declared emission guarantee and nothing that delivers it

Progress: 0/4 done | workplan_id: 84f5d9fe-b4c9-584a-b964-efe3e48af095

Open tasks:

  • · 1. Decide emission atomicity 2dbc225f
  • · 2. Register flex-auth as an audit-core sender 89661908
  • · 3. Transactional outbox, heartbeat and reconciliation counts a59603d5
  • · 4. Close G2 423b3090

The stance register outgrew the review that read it: five rows, and the divergence was ruled rather than resolved

Progress: 0/4 done | workplan_id: 5a11099d-b492-535c-af88-c334db5e8ee6

Open tasks:

  • · 1. Record that Finding 1 was ruled, not resolved 5a7ed269
  • · 2. Re-run Finding 2 across five rows 991ebb94
  • · 3. Close out Finding 3 against the current file 6dd2c9fd
  • · 4. Propagate the row count and state the version trigger 4dbadd0b

Tenant scoping is unstated in tenant-engine and untested in two more packages

Progress: 1/3 done | workplan_id: 804c588c-f47a-50c4-bdd7-51b24bbf9539

Open tasks:

  • ! 2. Encode the relation, or record that there is none 712ac826
  • ► 1. Get the intended tenant relation from tenant-engine a84dcee5

The layer declaration pins a version it should not, and four security-relevant peers do not declare at all

Progress: 7/8 done | workplan_id: abe60f5f-79cc-5857-b9e8-a46bed704279

Open tasks:

  • ► 4. Raise the conflicting and unclear boundaries for resolution 70786e6d

Repository identity migration from flex-auth to access-engine

Progress: 3/11 done | workplan_id: 99a661a8-b36c-5c1c-b78b-1e8930bcd0a9

Open tasks:

  • ! 5. Renew State Hub preflight and record approval 86fecbb6
  • ! 6. Execute the Forgejo repository rename aa7ccd59
  • ! 7. Record the State Hub identity rebind 155041ed
  • ! 8. Establish and register a fresh canonical clone c8afe078
  • ! 9. Verify identity, history, routes, builds, and deployments fdb50a96
  • ! 10. Exercise rollback decision points 3dc49eb4
  • ! 11. Soak, hand off residuals, and clean up the old checkout 46d8318b
  • … and 1 more open tasks

Admit scoped human review for the three T03 actions

Progress: 2/3 done | workplan_id: 954635b2-8377-5227-ab4f-10607b2a02c6

Open tasks:

  • ! Verify actual human review through the native service 9417d64a

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.