From 5c4bc167061debb6c8994615f13fba845565877a Mon Sep 17 00:00:00 2001
From: custodian-sync <custodian-sync@railiance.local>
Date: Mon, 28 Sep 2026 23:19:03 +0200
Subject: [PATCH] chore(consistency): sync task status from DB [auto]

Updated by fix-consistency on 2026-09-28:
  - update .custodian-brief.md for net-kingdom

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 237582@bnt-lap001
Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
---
 .custodian-brief.md | 46 +++++++++++++++++++++++++++++++++++----------
 1 file changed, 36 insertions(+), 10 deletions(-)

diff --git a/.custodian-brief.md b/.custodian-brief.md
index eecdba3..bfca523 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,16 +2,34 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-09-28 10:35 UTC  
+**Last synced:** 2026-09-28 21:18 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Implement deterministic posture and evidence feedback
-Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
+### NetKingdom Security Pattern Tutorials
+Progress: 0/6 done  |  workplan_id: `d4d02dbf-3974-502d-8b87-b776fc63e17e`
 
 **Open tasks:**
-- ! Obtain audit-core freshness adoption  `7d2029d2`
+- · Create the tutorial template  `3c6824a0`
+- · Demonstrate temporary object credentials  `d13760fd`
+- · Document the existing OpenBao operating path  `16cf51a4`
+- · Document SSH certificates and tunnels  `1d28e3f1`
+- · Integrate a protected flex-auth consumer  `c380ef19`
+- · Verify the tutorial outcomes  `5b6a1670`
+
+### Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker
+Progress: 0/8 done  |  workplan_id: `1075448f-d533-5f9e-94b7-c3adfe151a07`
+
+**Open tasks:**
+- · Decide federation adoption and topology  `a5807808`
+- · Admit the database consumer  `2fe6f100`
+- · Package the broker deployment  `32d1411b`
+- · Integrate an upstream identity provider  `6697a994`
+- · Define federated assurance  `d845380d`
+- · Verify IAM conformance and coexistence  `9cb7fd93`
+- · Enforce tenant and platform boundaries  `38998c68`
+- … and 1 more open tasks
 
 ### Publish the NetKingdom emission-cadence security profile
 Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
@@ -19,6 +37,12 @@ Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
 **Open tasks:**
 - ! Bind and hand off the published contract  `e3fbc8b8`
 
+### Implement deterministic posture and evidence feedback
+Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
+
+**Open tasks:**
+- ! Obtain audit-core freshness adoption  `7d2029d2`
+
 ### Reconcile reef placement and security-zone canon dependencies
 Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 
@@ -33,24 +57,26 @@ Progress: 1/2 done  |  workplan_id: `3f702215-704b-5788-8ca0-b8b9ba2dd3f8`
 **Open tasks:**
 - ! Agree the user-facing step-up and enrollment journey  `4e51585d`
 
-### Cut over NetKingdom identity to railiance01 and retire CoulombCore
-Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
+### Define an execution-attribution receipt for Railiance runs
+Progress: 1/2 done  |  workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487`
 
 **Open tasks:**
-- ! T08 - Final deletion and closure  `42a3b4c0`
+- ! Agree the evidence holder and schema with audit-core and Railiance  `963120c1`
 
 ### Take in the flex-auth to access-engine repository-coordinate rename
 Progress: 2/4 done  |  workplan_id: `284a8ac2-61dc-5bee-b74a-0a62d9808edb`
 
 **Open tasks:**
 - ! Update repository-coordinate references once access-engine resolves  `6e62919d`
+  *(wait: Await the flex-auth announcement that coulomb/access-engine resolves (FLEX-WP-0020), then verify repository-coordinate references.)*
 - ! Retire or reconcile the stale flex-auth/tenant-engine reference manifest  `2541f523`
+  *(wait: Retire-vs-reconcile answer routed to flex-auth (2c637dc9) and tenant-engine (9fc740da); act on whichever returns, do not pre-empt.)*
 
-### Define an execution-attribution receipt for Railiance runs
-Progress: 1/2 done  |  workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487`
+### Cut over NetKingdom identity to railiance01 and retire CoulombCore
+Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
 
 **Open tasks:**
-- ! Agree the evidence holder and schema with audit-core and Railiance  `963120c1`
+- ! T08 - Final deletion and closure  `42a3b4c0`
 
 ---
 ## MCP Orientation (when available)