ops-warden/.custodian-brief.md

<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — ops-warden

**Domain:** custodian  
**Last synced:** 2026-06-17 21:51 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### Production SSH Path and Stewardship Closeout
Progress: 3/5 done  |  workstream_id: `a174963a-4ff1-4565-b19f-896cd4ff14a0`

**Open tasks:**
- ! T2 — Production OpenBao end-to-end sign verification  `b1a1831d`
- ! T5 — flex-auth policy gate production readiness (coordination)  `03b412a5`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("custodian")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.