diff --git a/.custodian-brief.md b/.custodian-brief.md index a04eecf..2370147 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,16 +2,15 @@ # Custodian Brief — ops-mason **Domain:** infotech -**Last synced:** 2026-10-02 22:16 UTC +**Last synced:** 2026-10-03 01:29 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams ### Project the tenant-engine audit-core sender token into its namespace -Progress: 1/6 done | workplan_id: `60acab5e-8ee3-5449-bc1e-91b203e92262` +Progress: 2/6 done | workplan_id: `60acab5e-8ee3-5449-bc1e-91b203e92262` **Open tasks:** -- ! Policy and Kubernetes-auth role declared by railiance-platform `aadb4beb` - ! Manifests in the tenant-engine rApp repository `e56f0374` - ! Attended seed of the dedicated KV path `1bb05319` - ! Verify and hand off `84576093` @@ -36,8 +35,6 @@ Progress: 0/6 done | workplan_id: `483e56d6-6601-5377-9066-66225214c046` **Open tasks:** - ! Confirm the path and OIDC identity binding `18c9099f` *(wait: railiance-platform must confirm the tenant/path segment and the KeyCape group claim.)* -- ! Extend the construction and credential-change contracts `69c558d9` - *(wait: Needs the confirmed claim (T01) and the matching railiance-platform CCR schema/validator extension.)* - ! Review the plan and obtain the decision `48a2b4ec` *(wait: Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live survey.)* - ! Build the approved operator lane `0e3d1333` @@ -46,6 +43,7 @@ Progress: 0/6 done | workplan_id: `483e56d6-6601-5377-9066-66225214c046` *(wait: After T04 construction.)* - ! Hand off routing and keep the adapter lane separate `09eae088` *(wait: After T05 verification; only ops-warden activates the entry.)* +- · Extend the construction and credential-change contracts `69c558d9` ### Check the target's readiness tier before a direct Kubernetes apply Progress: 5/6 done | workplan_id: `1b900161-51ff-544f-8412-ba7fcab64bb5`