repo.work.assign_missing_identifiers

source: repo-manager
reason: deterministic projection registration

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2

.custodian-brief.md

@@ -2,18 +2,11 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-10-11 21:25 UTC  
+**Last synced:** 2026-10-13 21:42 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Publish the NetKingdom emission-cadence security profile
-Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
-
-**Open tasks:**
-- ! Bind and hand off the published contract  `e3fbc8b8`
-  *(wait: Approval Engine and Qonto owner declarations now pass the published schema and supplied-inventory profile; local-identity incompatibility is retained. Requires actual sender cadence mappings, lifecycle delivery/readback/reconciliation and Kings Guard operational feed evidence.)*
-
 ### Implement deterministic posture and evidence feedback
 Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
 
@@ -21,6 +14,13 @@ Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
 - ! Obtain audit-core freshness adoption  `7d2029d2`
   *(wait: audit-core tenancy.yaml must publish structured authoritative owner, observation/expiry and replacement-action metadata for WH-ENG-20260822-AUDIT-E2-03. Re-evaluate with explicit current as-of; later recovery prose does not renew E2.)*
 
+### Publish the NetKingdom emission-cadence security profile
+Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
+
+**Open tasks:**
+- ! Bind and hand off the published contract  `e3fbc8b8`
+  *(wait: Approval Engine and Qonto owner declarations now pass the published schema and supplied-inventory profile; local-identity incompatibility is retained. Requires actual sender cadence mappings, lifecycle delivery/readback/reconciliation and Kings Guard operational feed evidence.)*
+
 ### Reconcile reef placement and security-zone canon dependencies
 Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 
@@ -32,6 +32,21 @@ Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 - ! T06 — Resolve the `DataClassification` mismatch  `bf8b3e1d`
   *(wait: Requires InfoTechCanon ruling on public disclosure classification versus synthetic provenance, then ops-warden authoritative dataclass_floor mapping and tests; no public-to-synthetic alias.)*
 
+### Remove bootstrap secret output and verify separated recovery custody
+Progress: 1/3 done  |  workplan_id: `17d315f0-829e-57c7-85cc-3a7914152804`
+
+**Open tasks:**
+- ! Verify owner-approved recovery and current native callers  `d68cd4d3`
+  *(wait: Source caller reconciliation and exact owner-scoped isolated recovery ceremony are required; no live bootstrap or root retrieval is authorized by this source receipt.)*
+- ► Reconcile other legacy custody callers and root-output boundaries  `479d6970`
+
+### Define an execution-attribution receipt for Railiance runs
+Progress: 1/2 done  |  workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487`
+
+**Open tasks:**
+- ! Agree the evidence holder and schema with audit-core and Railiance  `963120c1`
+  *(wait: Audit-core accepted evidence custody and published field/admission requirements in AUDIT-WP-0014-T01. Still needs Railiance owner confirmation of exact emitter and wire binding before canonical schema/validator implementation, followed by actual emission/readback and attribution/clock/unknown-case acceptance.)*
+
 ### Establish SecurityCaseTypes so that known security cases are light
 Progress: 7/9 done  |  workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb`
 
@@ -41,12 +56,13 @@ Progress: 7/9 done  |  workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb`
 - ! T06 — First KnownSecurityCase: Forgejo  `c3c9c3ae`
   *(wait: The next types follow once the first one is proven end to end.)*
 
-### Define an execution-attribution receipt for Railiance runs
-Progress: 1/2 done  |  workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487`
+### Register Playwright human and agent consumers through governed identity delivery
+Progress: 1/3 done  |  workplan_id: `06ba98d5-609e-5aaa-9bf7-4c4f4460e377`
 
 **Open tasks:**
-- ! Agree the evidence holder and schema with audit-core and Railiance  `963120c1`
-  *(wait: Audit-core accepted evidence custody and published field/admission requirements in AUDIT-WP-0014-T01. Still needs Railiance owner confirmation of exact emitter and wire binding before canonical schema/validator implementation, followed by actual emission/readback and attribution/clock/unknown-case acceptance.)*
+- ! Verify issuer and real consumer acceptance  `5a3aaf57`
+  *(wait: Await owner-scoped registry/custody activation, native cluster authentication and individual transport, then real human and agent acceptance under CUST-WP-0080-T05.)*
+- ► Deliver custody integration and guarded registration activation  `a9dadd07`
 
 ### Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker
 Progress: 1/9 done  |  workplan_id: `1075448f-d533-5f9e-94b7-c3adfe151a07`

workplans/ADHOC-2026-10-11.md

@@ -57,6 +57,7 @@ are retained in docs/reviews/.
 id: NK-WP-ADHOC-2026-10-11-T03
 status: done
 priority: high
+state_hub_task_id: "03292a62-1803-5bdf-9f19-f2c8fa7b61db"
 ```
 
 NetKingdom-only source-owner review of the frozen 17-path Forgejo consumer ESO
@@ -80,6 +81,7 @@ docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-review.*.
 id: NK-WP-ADHOC-2026-10-11-T04
 status: done
 priority: high
+state_hub_task_id: "c867858d-dda6-504a-9eac-f53b8ece6e31"
 ```
 
 Received exact GH-DEC-2026-025 / GH-WP-0004-T06 source-owner handoff after
@@ -100,6 +102,7 @@ standard adoption. No finished INFD implementation plan is reopened.
 id: NK-WP-ADHOC-2026-10-11-T05
 status: done
 priority: high
+state_hub_task_id: "4903132f-3815-502d-bcf8-30d7a244f62d"
 ```
 
 Final narrow NetKingdom source-owner review of manifest
@@ -123,6 +126,7 @@ docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-final-review.*.
 id: NK-WP-ADHOC-2026-10-11-T06
 status: done
 priority: high
+state_hub_task_id: "cee400f6-f1a6-5ee3-8fde-68bfb4c9cbf4"
 ```
 
 NetKingdom-only source-owner review of exact26-path packet
@@ -183,6 +187,7 @@ No new source-ack trial or broad implementation plan is created.
 id: NK-WP-ADHOC-2026-10-11-T07
 status: done
 priority: high
+state_hub_task_id: "3b6d52b2-b011-54da-a1e8-4c2aef7a94ae"
 ```
 
 Completed NetKingdom-only offline source-owner review preparation of exact