docs: consolidate agent execution and custody

engagements/pilots/eng-coulomb-railiance01-ho-001/CUSTODY.md

@@ -0,0 +1,52 @@
+# Custody — eng-coulomb-railiance01-ho-001
+
+## Decision
+
+The engagement record and vault are owned by the `coulomb` client and classified
+`client_confidential`. Their present location in `kaizen-agentic` is
+transitional supplier custody, not supplier ownership.
+
+The selected receiving authority is:
+
+```text
+repository: railiance-infra
+path: docs/evidence/resource-hosteurope-railiance01/engagements/
+      eng-coulomb-railiance01-ho-001/
+```
+
+`railiance-infra` is the canonical S1 owner for Railiance01 inventory,
+hardening, access, and host-operational evidence, and already maintains the
+`resource-hosteurope-railiance01` evidence interface. `reef-railiance` is not
+the target: it owns grouped reef identity, topology, and bindings, not detailed
+host-operation records.
+
+## Current data classes
+
+| Tree | Classification | Intended custody |
+|------|----------------|------------------|
+| `ENGAGEMENT.yaml`, request, schedule, bound definition | client operational record | receiving repo |
+| `vault/`, reports, checklists, access plan | client confidential | receiving repo |
+| engagement-local `.kaizen/metrics/` | client execution evidence | receiving repo |
+| `commercial/` | client settlement metadata | receiving repo or financial authority |
+| reusable role craft under `roles/host-operator/` | supplier craft | remains in kaizen-agentic |
+
+The committed access plan contains operational routing and host identity, but
+no credential value. Secrets, private keys, tokens, and passwords must never be
+added to this tree or to a transfer package.
+
+## Transfer gate
+
+The supplier copy remains the source of truth until all of these are true:
+
+1. The receiving repository accepts the path and confidentiality policy.
+2. The complete engagement tree is copied with history or an attributable
+   import commit, and the receiver validates its manifest.
+3. The receiver records the accepted commit and acceptance date in
+   `vault/handoff/custody-transfer.yaml`.
+4. Scheduled execution and access references are changed to the receiving path.
+5. Only then may this supplier copy be reduced to a non-confidential pointer or
+   removed in a separately reviewed, recoverable change.
+
+Until acceptance, do not add new sensitive operational evidence here unless it
+is necessary to maintain the active engagement. Do not claim that a handoff
+pack created inside this repository has itself transferred custody.

engagements/pilots/eng-coulomb-railiance01-ho-001/ENGAGEMENT.yaml

@@ -26,6 +26,15 @@ spec:
   vault:
     root: vault/
     memory: vault/memory.md
+    custody:
+      owner: coulomb
+      classification: client_confidential
+      current_repo: kaizen-agentic
+      current_state: transitional_supplier_custody
+      target_repo: railiance-infra
+      target_path: docs/evidence/resource-hosteurope-railiance01/engagements/eng-coulomb-railiance01-ho-001/
+      transfer_status: proposed
+      transfer_manifest: vault/handoff/custody-transfer.yaml
   schedule:
     path: schedule.yml
   checklists:

engagements/pilots/eng-coulomb-railiance01-ho-001/schedule.yml

@@ -1,5 +1,6 @@
 # Duty cadence for eng-coulomb-railiance01-ho-001
-# activity-core wiring optional (Phase 3); manual prepare is enough for Phase 1
+# Entries declare intent. Manual prepare remains active until an engagement-specific
+# activity-core definition and rein-aharness profile are registered and smoke-tested.
 engagement_id: eng-coulomb-railiance01-ho-001
 timezone: Europe/Berlin
 entries:
@@ -12,7 +13,7 @@ entries:
     cadence: daily
     cron: "0 9 * * 1-5"
     enabled: true
-    notes: "Enabled after T10 ramp-up exit 2026-07-16; manual prepare until activity-core wired"
+    notes: "Declared after T10 ramp-up exit 2026-07-16; manual prepare until activity-core/rein-aharness wiring is accepted"
 
   - id: weekly-os-security
     agent: host-operator
@@ -22,4 +23,4 @@ entries:
     cadence: weekly
     cron: "0 10 * * 1"
     enabled: true
-    notes: "Privileged upgrades remain human-gated even when enabled"
+    notes: "Privileged upgrades remain human-gated under manual or automated execution"

engagements/pilots/eng-coulomb-railiance01-ho-001/vault/handoff/README.md

@@ -1,6 +1,7 @@
 # Handoff pack — eng-coulomb-railiance01-ho-001
 
-Filled during **ramp-down** (RD-02).
+Prepared during **ramp-down** (RD-02). The custody target was selected on
+2026-08-20, but the receiving repository has not yet accepted the transfer.
 
 ## Contents (when complete)
 
@@ -10,4 +11,18 @@ Filled during **ramp-down** (RD-02).
 - Deferred patches and reboot debt
 - Contacts and access revocation status
 
-_Status: not started (engagement not in ramp_down)._
+## Custody
+
+- Owner: `coulomb`
+- Classification: `client_confidential`
+- Current location: transitional supplier custody in `kaizen-agentic`
+- Receiving authority: `railiance-infra`
+- Proposed path:
+  `docs/evidence/resource-hosteurope-railiance01/engagements/eng-coulomb-railiance01-ho-001/`
+- Transfer record: `custody-transfer.yaml`
+
+The complete engagement tree, rather than only this handoff directory, must be
+transferred because metrics, reports, approvals, and commercial metadata are
+all client records. The source is retained until explicit receiver acceptance.
+
+_Status: handoff target selected; transfer proposed; engagement still operating._

engagements/pilots/eng-coulomb-railiance01-ho-001/vault/handoff/custody-transfer.yaml

@@ -0,0 +1,27 @@
+apiVersion: kaizen.agentic/v1
+kind: EngagementCustodyTransfer
+metadata:
+  engagement_id: eng-coulomb-railiance01-ho-001
+  prepared: '2026-08-20'
+spec:
+  owner: coulomb
+  classification: client_confidential
+  source:
+    repo: kaizen-agentic
+    path: engagements/pilots/eng-coulomb-railiance01-ho-001/
+    custody: transitional_supplier
+  destination:
+    repo: railiance-infra
+    path: docs/evidence/resource-hosteurope-railiance01/engagements/eng-coulomb-railiance01-ho-001/
+    reason: canonical S1 authority for Railiance01 host-operational evidence
+  transfer_scope: complete_engagement_tree
+  exclusions:
+  - roles/host-operator/
+  acceptance:
+    status: proposed
+    accepted_commit: null
+    accepted_by: null
+    accepted_at: null
+  source_disposition:
+    status: retained_until_acceptance
+    action_after_acceptance: replace_with_non_confidential_pointer_after_review