Record recovery handoff scope and preserve prior generated brief

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2

.custodian-brief.md

@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-10-15 17:24 UTC  
+**Last synced:** 2026-10-14 22:34 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -69,6 +69,17 @@ Progress: 7/9 done  |  workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb`
 - ! T06 — First KnownSecurityCase: Forgejo  `c3c9c3ae`
   *(wait: The next types follow once the first one is proven end to end.)*
 
+### Show who a workload sign-in actually is
+Progress: 3/6 done  |  workplan_id: `c1771c07-4466-5aa2-ad43-df63a471946b`
+
+**Open tasks:**
+- ! Account site shows both sessions  `bdc8b414`
+  *(wait: Implemented in user-engine 80f5870 (USER-WP-0039). Waits for USER-WP-0039-T02: deploy and a mismatched-session check.)*
+- ! Enroll the negative-login factor  `afb5816f`
+  *(wait: After T04 names the fixture uid. Founder enrolls its one-time password at https://pink-account.coulomb.social/, realm coulomb.)*
+- ! Hand the OpenBao proof back to its owners  `86fb4a6b`
+  *(wait: Implemented in ops-mason fca5591 (MASON-WP-0012) and railiance-platform 0f0282a (RPF-WP-0057). Waits for CCR-2026-0045 apply, overlay deploy, and the MASON-WP-0012-T04 live proof.)*
+
 ### Register Playwright human and agent consumers through governed identity delivery
 Progress: 1/3 done  |  workplan_id: `06ba98d5-609e-5aaa-9bf7-4c4f4460e377`
 

workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md

@@ -34,9 +34,9 @@ completion percentage. Assignees are also written in task descriptions because
 the current Forge projector does not populate the dedicated Hub assignee field. The outage-retrieval tool and restore-packet draft are now prepared;
 owner execution/publication and service admission remain explicit gates.
 
-**Next actions:** finish the read-only caller ledger (T02); prepare the isolated
-restore packet (T15), independent offline retrieval (T23), and residual-scope
-handoffs (T24). After owner admission, execute the individual native service and
+**Next actions:** finish the read-only caller ledger (T02); admit the drafted
+isolated restore packet (T15), execute independent offline retrieval (T23) and
+guide publication (T26), and record residual-scope handoffs (T24). After owner admission, execute the individual native service and
 caller checks. A task's owner is accountable for the result; another repository's
 approval or credential grant still requires its own owner path.
 
@@ -690,7 +690,8 @@ state_hub_task_id: "94d054fe-e5d8-5ddf-8e48-80714123d184"
 
 **Accountable worker:** codex; operator holds provider access privately.
 
-Requested by the operator on 2026-10-16. Guide source:
+Requested by the operator on 2026-10-16; decision
+`fc3ef8db-0a33-41d5-a0ba-d13169c5f884` records the bounded scope. Guide source:
 `docs/disaster-recovery-storage-share.md`. Document scope, independently held
 provider/key requirements, exact known-good fallback, copy/download verification,
 archive-check commands, service restore order, recurring schedule and remaining
@@ -773,3 +774,8 @@ Refinement rule: substantial work and newly understood remaining scope must be
 visible in task blocks at a checkpoint, not only in progress prose. This replan
 preserves T01–T03 identity and original evidence while making the completed
 milestones and each remaining acceptance gate separately manageable.
+
+Managed identifier assignment also consumed a preexisting staged generated brief;
+the follow-up commit restores its prior published baseline while preserving the
+operator's working brief and original staged version. This is a projection-tool
+side effect, not new recovery evidence.