<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — key-cape

**Domain:** infotech  
**Last synced:** 2026-07-27 18:03 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### Client credentials and service-token issuance
Progress: 3/5 done  |  workplan_id: `f2d5df23-9dd2-4995-b218-be5904e07508`

**Open tasks:**
- ! T04 - Provision and verify rapp-qonto  `ba65d39f`
- ! T05 - Closure review  `7c9cdac6`

### Binky Hedgehog GmbH as first NetKingdom tenant + qonto runtime workload identity
Progress: 0/7 done  |  workplan_id: `ad6fa711-ba5b-4e7d-86e3-641f9acaf853`

**Open tasks:**
- ► Task: Register a workload-identity OIDC client for qonto-assistant callers  `fbe9d2e0`
- ► Task: Route client_secret custody through secrets-engine + OpenBao  `80901eb3`
- ► Task: Register the credential lane with ops-warden  `a91326a6`
- · Task: Confirm tenant identifier and provision the tenant plane  `ec65d1be`
- · Task: Provision bernd.worsch@binky-hedgehog.com as tenant-admin  `b5cb4497`
- · Task: automation@binky-hedgehog.com service identity (deferred)  `d3460058`
- · Task: Closure review  `9511a7ef`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("infotech")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.