From a3f1b7dd12f68013d5e39785646282a74de2e6de Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 19 Oct 2026 13:44:09 +0200 Subject: [PATCH] build: keep generated orientation brief local and untracked Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181 --- .custodian-brief.md | 37 ------------------------------------- .gitignore | 3 +++ SCOPE.md | 8 ++++++++ 3 files changed, 11 insertions(+), 37 deletions(-) delete mode 100644 .custodian-brief.md diff --git a/.custodian-brief.md b/.custodian-brief.md deleted file mode 100644 index d3b36c3..0000000 --- a/.custodian-brief.md +++ /dev/null @@ -1,37 +0,0 @@ - -# Custodian Brief — key-cape - -**Domain:** infotech -**Last synced:** 2026-10-17 02:16 UTC -**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* - -## Active Workstreams - -### Negative-check tokens for the secrets-engine OpenBao JWT role -Progress: 2/3 done | workplan_id: `09c3bddf-6058-5603-8488-cccdb7be4f86` - -**Open tasks:** -- ! T01 — Define the probe registrations `03da4c38` - *(wait: Ordered identity gate: Forgejo first SecurityCase registration/claims proof, then NetKingdom registry session and attended human/coding-agent custody; registration authorization already resolved.)* - -### Forgejo as a NetKingdom OIDC client, so the forge can close -Progress: 2/4 done | workplan_id: `098e3e2c-a138-560e-b2d3-3a15eb49d8a9` - -**Open tasks:** -- ! T01 — Define what Forgejo receives `ddcfb482` - *(wait: Registration runs as the first KnownSecurityCase of type oidc-browser-relying-party (NK-WP-0048-T06), not as a hand-built rollout.)* -- ! T02 — Register the client and hand over its secret `40ddaa29` - *(wait: Claims are verified against the registered client.)* - -## Inbox Hygiene - -**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. -**Missing thread_id:** 2 unread message(s) lack supersession chains. - ---- -## MCP Orientation (when available) - -If the state-hub MCP server is reachable, call: -`get_domain_summary("infotech")` -This provides richer cross-domain context. -If the MCP call fails, use this file as your orientation source. diff --git a/.gitignore b/.gitignore index e705f7f..d71a216 100644 --- a/.gitignore +++ b/.gitignore @@ -182,3 +182,6 @@ cython_debug/ # a private key and a password hash, both development-only. config/dev-key.pem config/authelia/ + +# Generated workstation orientation; keep local, regenerate from State Hub. +/.custodian-brief.md diff --git a/SCOPE.md b/SCOPE.md index 46f4d9e..ad3ccf9 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -239,3 +239,11 @@ WORK-RECORDS.md with the selected source paths. Existing generated-only guards and exact-scope secret scans remain in place. This is repository maintenance, not a runtime service, authorization decision, deployment or publication. Other index generators and hub-derived briefs retain their owner boundaries. + + +## Local orientation brief + +`.custodian-brief.md` is a generated local orientation snapshot. It remains on +disk for offline use and is root-ignored rather than versioned. Regenerate it +with the State Hub brief renderer; workplans and other authored repository +records remain authoritative. Brief refreshes must not create Git commits.