NK-WP-0048: record T16 budget decomposition and T15 Warden interface check

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 903097@bnt-lap001
Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23

.custodian-brief.md

@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-10-14 22:34 UTC  
+**Last synced:** 2026-10-15 17:24 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -69,17 +69,6 @@ Progress: 7/9 done  |  workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb`
 - ! T06 — First KnownSecurityCase: Forgejo  `c3c9c3ae`
   *(wait: The next types follow once the first one is proven end to end.)*
 
-### Show who a workload sign-in actually is
-Progress: 3/6 done  |  workplan_id: `c1771c07-4466-5aa2-ad43-df63a471946b`
-
-**Open tasks:**
-- ! Account site shows both sessions  `bdc8b414`
-  *(wait: Implemented in user-engine 80f5870 (USER-WP-0039). Waits for USER-WP-0039-T02: deploy and a mismatched-session check.)*
-- ! Enroll the negative-login factor  `afb5816f`
-  *(wait: After T04 names the fixture uid. Founder enrolls its one-time password at https://pink-account.coulomb.social/, realm coulomb.)*
-- ! Hand the OpenBao proof back to its owners  `86fb4a6b`
-  *(wait: Implemented in ops-mason fca5591 (MASON-WP-0012) and railiance-platform 0f0282a (RPF-WP-0057). Waits for CCR-2026-0045 apply, overlay deploy, and the MASON-WP-0012-T04 live proof.)*
-
 ### Register Playwright human and agent consumers through governed identity delivery
 Progress: 1/3 done  |  workplan_id: `06ba98d5-609e-5aaa-9bf7-4c4f4460e377`
 

workplans/NK-WP-0048-security-case-types.md

@@ -794,6 +794,14 @@ reconciliation callback. Existing source review, JSON receipts and synthetic
 trust do not satisfy native holder acceptance or authorize attended recovery.
 Exact remaining owner facts: Custodian native-registration-r1/original-attempt-review.json.
 
+2026-10-17 check (net-kingdom-worker): Warden's original-intent lookup interface
+is not published — ops-warden head is `d97652a`, with no WARDEN-WP-0044-T03
+commit, and the net-kingdom inbox holds no announcement. No restart/lost-receipt
+fixture or readback seam was added this session; the work is deferred behind
+T16's decomposition under the same token budget. Remains todo, gated on Warden
+publishing the reviewed lookup/context interface and on owner selection of the
+authenticated original-attempt holder.
+
 ## T16 — Select and review the actual machine descriptor composition
 
 ```task
@@ -843,6 +851,19 @@ successor descriptor/source pins are proposed only; the earlier descriptor
 history is preserved. T14 group provenance and T15 durable restart/recovery
 remain independent open requirements. No native acceptance is counted here.
 
+2026-10-17 budget checkpoint (net-kingdom-worker): no source change made. The
+T13 registration adapter alone is 217 source and 317 test lines plus an
+independent review; six further owner descriptors/adapters cannot be completed
+within one per-task token budget (soft 8000 / hard 10000), so the task was
+stopped below 50% and is decomposed rather than pushed through. Proposed split,
+one source-candidate task each with positive/refusal fixtures, canonical1.1
+default unchanged and no --allow-unimplemented admission: (a) ensure-groups,
+bound to T14's journal/provenance seam; (b) mint-secret and (c) deliver-secret,
+Platform-owned evidence seams; (d) bind-env and (e) deliver-consumer-secret;
+(f) hand-over, Apps-owned consumer verification; then (g) descriptor composition
+over the reviewed set. Each candidate needs its owner's source review before
+pinning; none is authored here as owner-accepted. Status stays todo.
+
 ## T17 — Build and exercise the exact offline config-checker artifact
 
 ```task