net-kingdom/.custodian-brief.md
custodian-sync 5c4bc16706
Some checks are pending
CI Smoke / container-smoke (push) Waiting to run
CI Smoke / host-smoke (push) Waiting to run
chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-09-28:
  - update .custodian-brief.md for net-kingdom

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 237582@bnt-lap001
Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
2026-09-28 23:19:03 +02:00

3.5 KiB

Custodian Brief — net-kingdom

Domain: infotech
Last synced: 2026-09-28 21:18 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

NetKingdom Security Pattern Tutorials

Progress: 0/6 done | workplan_id: d4d02dbf-3974-502d-8b87-b776fc63e17e

Open tasks:

  • · Create the tutorial template 3c6824a0
  • · Demonstrate temporary object credentials d13760fd
  • · Document the existing OpenBao operating path 16cf51a4
  • · Document SSH certificates and tunnels 1d28e3f1
  • · Integrate a protected flex-auth consumer c380ef19
  • · Verify the tutorial outcomes 5b6a1670

Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker

Progress: 0/8 done | workplan_id: 1075448f-d533-5f9e-94b7-c3adfe151a07

Open tasks:

  • · Decide federation adoption and topology a5807808
  • · Admit the database consumer 2fe6f100
  • · Package the broker deployment 32d1411b
  • · Integrate an upstream identity provider 6697a994
  • · Define federated assurance d845380d
  • · Verify IAM conformance and coexistence 9cb7fd93
  • · Enforce tenant and platform boundaries 38998c68
  • … and 1 more open tasks

Publish the NetKingdom emission-cadence security profile

Progress: 4/5 done | workplan_id: 04685f94-1991-5e62-80d2-5669913e99fc

Open tasks:

  • ! Bind and hand off the published contract e3fbc8b8

Implement deterministic posture and evidence feedback

Progress: 4/5 done | workplan_id: 9d7b04f9-3803-5613-b7a5-8bd606c77f5a

Open tasks:

  • ! Obtain audit-core freshness adoption 7d2029d2

Reconcile reef placement and security-zone canon dependencies

Progress: 3/6 done | workplan_id: 965ad365-6b81-50a1-a2a3-2d0c1fcce0b4

Open tasks:

  • ! T02 — Extend provider declarations to reefs 5b35b646
  • ! T03 — Reconcile reef ceilings mechanically e3f0bb0f
  • ! T06 — Resolve the DataClassification mismatch bf8b3e1d

Let workloads require MFA for all or part of their features

Progress: 1/2 done | workplan_id: 3f702215-704b-5788-8ca0-b8b9ba2dd3f8

Open tasks:

  • ! Agree the user-facing step-up and enrollment journey 4e51585d

Define an execution-attribution receipt for Railiance runs

Progress: 1/2 done | workplan_id: e2533f3a-aa43-59b3-bff3-8e64b6149487

Open tasks:

  • ! Agree the evidence holder and schema with audit-core and Railiance 963120c1

Take in the flex-auth to access-engine repository-coordinate rename

Progress: 2/4 done | workplan_id: 284a8ac2-61dc-5bee-b74a-0a62d9808edb

Open tasks:

  • ! Update repository-coordinate references once access-engine resolves 6e62919d (wait: Await the flex-auth announcement that coulomb/access-engine resolves (FLEX-WP-0020), then verify repository-coordinate references.)
  • ! Retire or reconcile the stale flex-auth/tenant-engine reference manifest 2541f523 (wait: Retire-vs-reconcile answer routed to flex-auth (2c637dc9) and tenant-engine (9fc740da); act on whichever returns, do not pre-empt.)

Cut over NetKingdom identity to railiance01 and retire CoulombCore

Progress: 7/8 done | workplan_id: d76ddccc-00c8-548a-b141-2cd660fa38da

Open tasks:

  • ! T08 - Final deletion and closure 42a3b4c0

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.