coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ops-mason/.custodian-brief.md
custodian-sync ce98fb9fc7 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:03:14 +02:00

3.1 KiB
Raw Blame History

Custodian Brief — ops-mason

Domain: infotech
Last synced: 2026-10-09 09:03 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

Materialize SecurityCases from their type, with acceptance as the only gate

Progress: 1/4 done | workplan_id: eabf2c39-94bd-5a11-8f2e-76d7a95d1583

Open tasks:

  • ! T01 — Define the type's materialization section fd385537
  • ! T02 — Render a construction plan from a case 56cea6be
  • ! T03 — Build from an accepted case f6ad0d3c

Check the target's readiness tier before a direct Kubernetes apply

Progress: 5/6 done | workplan_id: 1b900161-51ff-544f-8412-ba7fcab64bb5

Open tasks:

  • ! Review on 2026-12-21 49dd5f9a (wait: Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception.)

Describe every stored credential so the store is navigable

Progress: 1/4 done | workplan_id: e5656747-a974-581a-a3d4-4e6bb7262f4c

Open tasks:

  • ! Describe the paths whose purpose is already documented a6a944d7 (wait: Requires a valid scoped metadata grant (operator) before the described paths can be written and verified.)
  • ! Resolve the rest with their owners fff26914 (wait: Blocked on T01: owners answer what/what-breaks/what-if-lost per undescribed path.)
  • ! Make an undescribed path visible before it accumulates 9a0cea06 (wait: Blocked on T03.)

Project the tenant-engine audit-core sender token into its namespace

Progress: 5/6 done | workplan_id: 60acab5e-8ee3-5449-bc1e-91b203e92262

Open tasks:

  • ! Verify and hand off 84576093 (wait: Needs T03-T05. Verify by metadata only: KV version exists, store Ready, ExternalSecret SecretSynced, Secret exists with key name token; negative check that the role cannot read the registry path. Add the ops-warden audit-core-senders pointer line and tell tenant-engine.)

Construct the fluid-telegram operator credential lane

Progress: 3/6 done | workplan_id: 483e56d6-6601-5377-9066-66225214c046

Open tasks:

  • ! Build the approved operator lane 0e3d1333 (wait: After T03 approval.)
  • ! Verify capabilities and record metadata-only evidence 4c205be7 (wait: After T04 construction.)
  • ! Hand off routing and keep the adapter lane separate 09eae088 (wait: After T05 verification; only ops-warden activates the entry.)

Place the KeyCape secrets-engine-openbao client secret in OpenBao

Progress: 4/5 done | workplan_id: d9be08f5-a0f5-5cd1-8f87-0a6868661d77

Open tasks:

  • ! Live lane proof and pointer route 1b1a0566

Inbox Hygiene

Stale unread: 2 message(s) older than 3 day(s) — triage at session start. Missing thread_id: 2 unread message(s) lack supersession chains.

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.