From 1a36e857cc5aae6fe738f794417126c46dd94627 Mon Sep 17 00:00:00 2001 From: repo-manager Date: Wed, 14 Oct 2026 02:11:30 +0200 Subject: [PATCH] repo.work.assign_missing_identifiers source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2 --- .custodian-brief.md | 40 ++++++++++++++++++++++++----------- workplans/ADHOC-2026-10-11.md | 5 +++++ 2 files changed, 33 insertions(+), 12 deletions(-) diff --git a/.custodian-brief.md b/.custodian-brief.md index 859d199..e72e568 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,18 +2,11 @@ # Custodian Brief — net-kingdom **Domain:** infotech -**Last synced:** 2026-10-11 21:25 UTC +**Last synced:** 2026-10-13 21:42 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams -### Publish the NetKingdom emission-cadence security profile -Progress: 4/5 done | workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc` - -**Open tasks:** -- ! Bind and hand off the published contract `e3fbc8b8` - *(wait: Approval Engine and Qonto owner declarations now pass the published schema and supplied-inventory profile; local-identity incompatibility is retained. Requires actual sender cadence mappings, lifecycle delivery/readback/reconciliation and Kings Guard operational feed evidence.)* - ### Implement deterministic posture and evidence feedback Progress: 4/5 done | workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a` @@ -21,6 +14,13 @@ Progress: 4/5 done | workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a` - ! Obtain audit-core freshness adoption `7d2029d2` *(wait: audit-core tenancy.yaml must publish structured authoritative owner, observation/expiry and replacement-action metadata for WH-ENG-20260822-AUDIT-E2-03. Re-evaluate with explicit current as-of; later recovery prose does not renew E2.)* +### Publish the NetKingdom emission-cadence security profile +Progress: 4/5 done | workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc` + +**Open tasks:** +- ! Bind and hand off the published contract `e3fbc8b8` + *(wait: Approval Engine and Qonto owner declarations now pass the published schema and supplied-inventory profile; local-identity incompatibility is retained. Requires actual sender cadence mappings, lifecycle delivery/readback/reconciliation and Kings Guard operational feed evidence.)* + ### Reconcile reef placement and security-zone canon dependencies Progress: 3/6 done | workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4` @@ -32,6 +32,21 @@ Progress: 3/6 done | workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4` - ! T06 — Resolve the `DataClassification` mismatch `bf8b3e1d` *(wait: Requires InfoTechCanon ruling on public disclosure classification versus synthetic provenance, then ops-warden authoritative dataclass_floor mapping and tests; no public-to-synthetic alias.)* +### Remove bootstrap secret output and verify separated recovery custody +Progress: 1/3 done | workplan_id: `17d315f0-829e-57c7-85cc-3a7914152804` + +**Open tasks:** +- ! Verify owner-approved recovery and current native callers `d68cd4d3` + *(wait: Source caller reconciliation and exact owner-scoped isolated recovery ceremony are required; no live bootstrap or root retrieval is authorized by this source receipt.)* +- ► Reconcile other legacy custody callers and root-output boundaries `479d6970` + +### Define an execution-attribution receipt for Railiance runs +Progress: 1/2 done | workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487` + +**Open tasks:** +- ! Agree the evidence holder and schema with audit-core and Railiance `963120c1` + *(wait: Audit-core accepted evidence custody and published field/admission requirements in AUDIT-WP-0014-T01. Still needs Railiance owner confirmation of exact emitter and wire binding before canonical schema/validator implementation, followed by actual emission/readback and attribution/clock/unknown-case acceptance.)* + ### Establish SecurityCaseTypes so that known security cases are light Progress: 7/9 done | workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb` @@ -41,12 +56,13 @@ Progress: 7/9 done | workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb` - ! T06 — First KnownSecurityCase: Forgejo `c3c9c3ae` *(wait: The next types follow once the first one is proven end to end.)* -### Define an execution-attribution receipt for Railiance runs -Progress: 1/2 done | workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487` +### Register Playwright human and agent consumers through governed identity delivery +Progress: 1/3 done | workplan_id: `06ba98d5-609e-5aaa-9bf7-4c4f4460e377` **Open tasks:** -- ! Agree the evidence holder and schema with audit-core and Railiance `963120c1` - *(wait: Audit-core accepted evidence custody and published field/admission requirements in AUDIT-WP-0014-T01. Still needs Railiance owner confirmation of exact emitter and wire binding before canonical schema/validator implementation, followed by actual emission/readback and attribution/clock/unknown-case acceptance.)* +- ! Verify issuer and real consumer acceptance `5a3aaf57` + *(wait: Await owner-scoped registry/custody activation, native cluster authentication and individual transport, then real human and agent acceptance under CUST-WP-0080-T05.)* +- ► Deliver custody integration and guarded registration activation `a9dadd07` ### Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker Progress: 1/9 done | workplan_id: `1075448f-d533-5f9e-94b7-c3adfe151a07` diff --git a/workplans/ADHOC-2026-10-11.md b/workplans/ADHOC-2026-10-11.md index 3aca798..94059eb 100644 --- a/workplans/ADHOC-2026-10-11.md +++ b/workplans/ADHOC-2026-10-11.md @@ -57,6 +57,7 @@ are retained in docs/reviews/. id: NK-WP-ADHOC-2026-10-11-T03 status: done priority: high +state_hub_task_id: "03292a62-1803-5bdf-9f19-f2c8fa7b61db" ``` NetKingdom-only source-owner review of the frozen 17-path Forgejo consumer ESO @@ -80,6 +81,7 @@ docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-review.*. id: NK-WP-ADHOC-2026-10-11-T04 status: done priority: high +state_hub_task_id: "c867858d-dda6-504a-9eac-f53b8ece6e31" ``` Received exact GH-DEC-2026-025 / GH-WP-0004-T06 source-owner handoff after @@ -100,6 +102,7 @@ standard adoption. No finished INFD implementation plan is reopened. id: NK-WP-ADHOC-2026-10-11-T05 status: done priority: high +state_hub_task_id: "4903132f-3815-502d-bcf8-30d7a244f62d" ``` Final narrow NetKingdom source-owner review of manifest @@ -123,6 +126,7 @@ docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-final-review.*. id: NK-WP-ADHOC-2026-10-11-T06 status: done priority: high +state_hub_task_id: "cee400f6-f1a6-5ee3-8fde-68bfb4c9cbf4" ``` NetKingdom-only source-owner review of exact26-path packet @@ -183,6 +187,7 @@ No new source-ack trial or broad implementation plan is created. id: NK-WP-ADHOC-2026-10-11-T07 status: done priority: high +state_hub_task_id: "3b6d52b2-b011-54da-a1e8-4c2aef7a94ae" ``` Completed NetKingdom-only offline source-owner review preparation of exact