diff --git a/.custodian-brief.md b/.custodian-brief.md index 5cf90be..b3b9d13 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,7 +2,7 @@ # Custodian Brief — ops-mason **Domain:** infotech -**Last synced:** 2026-10-03 06:35 UTC +**Last synced:** 2026-10-03 06:38 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams @@ -21,16 +21,13 @@ Progress: 0/4 done | workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c` *(wait: Blocked on T03.)* ### Project the tenant-engine audit-core sender token into its namespace -Progress: 2/6 done | workplan_id: `60acab5e-8ee3-5449-bc1e-91b203e92262` +Progress: 4/6 done | workplan_id: `60acab5e-8ee3-5449-bc1e-91b203e92262` **Open tasks:** - ! Manifests in the tenant-engine rApp repository `e56f0374` *(wait: tenant-engine/rapp-tenant-engine declares SA tenant-engine-eso, ClusterSecretStore openbao-tenant-engine-audit-core-sender and ExternalSecret tenant-engine-audit-core-sender per the plan, reconciled by ArgoCD.)* -- ! Attended seed of the dedicated KV path `1bb05319` - *(wait: APPROVED by founder 2026-10-03; remaining: the founder runs the attended sitting. Reviewed sequence in railiance-platform docs/credential-lane-designs/tenant-engine-audit-core-sender-seed.md (commit e7eb9db): 1) scripts/openbao-tenant-engine-audit-core-sender-eso-attended.sh (policy + k8s-auth role), 2) scripts/tenant_engine_audit_core_sender_seed.py --dry-run, 3) the same helper without --dry-run, each under warden openbao-platform-admin-login. Silent CAS-0 copy of the tenant-engine token from the registry; never overwrites. Founder approves as one memo.)* - ! Verify and hand off `84576093` *(wait: Needs T03-T05. Verify by metadata only: KV version exists, store Ready, ExternalSecret SecretSynced, Secret exists with key name token; negative check that the role cannot read the registry path. Add the ops-warden audit-core-senders pointer line and tell tenant-engine.)* -- · Complete the live survey and review the plan `1819909b` ### Construct the fluid-telegram operator credential lane Progress: 0/6 done | workplan_id: `483e56d6-6601-5377-9066-66225214c046`