net-kingdom/.custodian-brief.md

Custodian Brief — net-kingdom

Domain: infotech
Last synced: 2026-10-03 18:50 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker

Progress: 1/9 done | workplan_id: 1075448f-d533-5f9e-94b7-c3adfe151a07

Open tasks:

• · Admit the database consumer 2fe6f100
• · Package the broker deployment 32d1411b
• · Integrate an upstream identity provider 6697a994
• · Define federated assurance d845380d
• · Verify IAM conformance and coexistence 9cb7fd93
• · Enforce tenant and platform boundaries 38998c68
• · Prove recovery and audit delivery e5f44ddc
• … and 1 more open tasks

Reconcile reef placement and security-zone canon dependencies

Progress: 3/6 done | workplan_id: 965ad365-6b81-50a1-a2a3-2d0c1fcce0b4

Open tasks:

• ! T02 — Extend provider declarations to reefs 5b35b646 (wait: Proposal to repo-manager: extend Decision 5.5 provider declaration to substrate providers.)
• ! T03 — Reconcile reef ceilings mechanically e3f0bb0f (wait: Mechanical join of reef ceilings to consumer V declarations waits on T02.)
• ! T06 — Resolve the DataClassification mismatch bf8b3e1d (wait: DataClassification vocabulary mismatch between rapp-policy-nexus (public) and ops-warden dataclass_floor must be resolved with those owners.)

Publish the NetKingdom emission-cadence security profile

Progress: 4/5 done | workplan_id: 04685f94-1991-5e62-80d2-5669913e99fc

Open tasks:

• ! Bind and hand off the published contract e3fbc8b8 (wait: Needs info-tech-canon's versioned contract and schema; cannot be completed by copying the draft.)

Implement deterministic posture and evidence feedback

Progress: 4/5 done | workplan_id: 9d7b04f9-3803-5613-b7a5-8bd606c77f5a

Open tasks:

• ! Obtain audit-core freshness adoption 7d2029d2 (wait: audit-core must add authoritative owner and E2 freshness metadata for WH-ENG-20260822-AUDIT-E2-03; NetKingdom must not parse it from prose.)

Make the platform-root custody record readable as a non-secret root-grant fact

Progress: 5/6 done | workplan_id: 43fbb1aa-b711-5792-b72b-07cd93ca8f45

Open tasks:

• ! Deliver the read path with the owner 628e8a3b (wait: Live empty source, consumer rollout/restart/denial and audit correlation verified. Remaining producer closure is attended current owner restore-check and governed encrypted retained-history provider upload/download/decryption evidence; no new approval or actual grant required.)

Define an execution-attribution receipt for Railiance runs

Progress: 1/2 done | workplan_id: e2533f3a-aa43-59b3-bff3-8e64b6149487

Open tasks:

• ! Agree the evidence holder and schema with audit-core and Railiance 963120c1 (wait: Agree with audit-core who emits, who holds and how the execution-attribution receipt is validated.)

Let workloads require MFA for all or part of their features

Progress: 1/2 done | workplan_id: 3f702215-704b-5788-8ca0-b8b9ba2dd3f8

Open tasks:

• ! Agree the user-facing step-up and enrollment journey 4e51585d (wait: Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted from a user's perspective.)

Cut over NetKingdom identity to railiance01 and retire CoulombCore

Progress: 7/8 done | workplan_id: d76ddccc-00c8-548a-b141-2cd660fa38da

Open tasks:

• ! T08 - Final deletion and closure 42a3b4c0 (wait: Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill before destructive CoulombCore cleanup.)

---

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.