The agent responsible to create, change, maintain and tear down access routes with new credentials, tokens, policies, etc inside net-kingdom. Ops-mason is responsible to build the security infrastructure as required and defined by architecture documents as a base for ops-warden..
Find a file
tegwick 0c39bbd1cc Register with State Hub, close bootstrap housekeeping (MASON-0001)
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 00:22:58 +02:00
workplans Register with State Hub, close bootstrap housekeeping (MASON-0001) 2026-07-27 00:22:58 +02:00
.custodian-brief.md Register with State Hub, close bootstrap housekeeping (MASON-0001) 2026-07-27 00:22:58 +02:00
.gitignore Register with State Hub, close bootstrap housekeeping (MASON-0001) 2026-07-27 00:22:58 +02:00
AGENTS.md Register with State Hub, close bootstrap housekeeping (MASON-0001) 2026-07-27 00:22:58 +02:00
INTENT.md Charter ops-mason: builder of NetKingdom security infrastructure 2026-07-27 00:21:25 +02:00
LICENSE Initial commit 2026-07-26 21:42:19 +00:00
README.md Charter ops-mason: builder of NetKingdom security infrastructure 2026-07-27 00:21:25 +02:00
SCOPE.md Register with State Hub, close bootstrap housekeeping (MASON-0001) 2026-07-27 00:22:58 +02:00

ops-mason

The builder of NetKingdom security infrastructure — creates, changes, maintains, and tears down access routes, credentials, tokens, and policies so that ops-warden always has something real to route to.

The four-phase process

  1. Construction plan — given an access demand, draft what needs building, respecting/extending/compacting existing structure first.
  2. Review and optimize — self-review the plan against what already exists, for consistency and ease of use.
  3. Executive summary — the one mandatory human decision gate: render who gets what access, for how long, and what it costs to reverse.
  4. Build — once approved, execute the plan.

See INTENT.md for the full responsibility boundary against ops-warden, OpenBao, flex-auth, and key-cape.