diff --git a/.custodian-brief.md b/.custodian-brief.md deleted file mode 100644 index 34573d2..0000000 --- a/.custodian-brief.md +++ /dev/null @@ -1,60 +0,0 @@ - -# Custodian Brief — ops-warden - -**Domain:** infotech -**Last synced:** 2026-10-16 00:05 UTC -**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* - -## Active Workstreams - -### Adopt unknown -> fail_closed behind signing-target classification coverage -Progress: 1/4 done | workplan_id: `c8ee441e-1be1-5219-910c-e79ff23cc9ec` - -**Open tasks:** -- ! Tasks `611f0901` - *(wait: Warden's own declaration cannot classify the repair-path target workloads; the owner must declare the continuity actor/target and its z2-continuity resolution (see 2026-09-28 review).)* -- ! Tasks `54ad4864` - *(wait: Owners of agt-codex-interhub-bootstrap (ops-hub) and agt-state-hub-bridge (ops-bridge) must publish authoritative workload identity declarations; atm-backup-daily declared by activity-core and compiled 2026-10-09 (z2-protected, admission unsatisfied: M1 below M2 floor).)* -- ! Tasks `93eaf1f2` - *(wait: Gated on T01 and on layer model v0.8 (or successor) reaching accepted; never convert against a proposed standard.)* - -### Layer model v0.7 conformance — state the deadline, bind the agent boundary, steward the estate's newest rule -Progress: 5/6 done | workplan_id: `ae3ff76f-883d-5e2f-b6aa-144d61e8fdef` - -**Open tasks:** -- ! Tasks `7d1b3c82` - *(wait: Two items to route, not absorb: ops-mason has published no stance map; the second is another repository's to own.)* - -### Follow through on KnownSecurityCases along their type's route -Progress: 2/4 done | workplan_id: `f7e81013-6868-5d99-8528-ba75a442eca9` - -**Open tasks:** -- ! T03 — Run and verify a case `4a0fa4a7` - *(wait: Catalog integration follows a proven run.)* -- ► T02 — Plan a case run `bcbf6c91` - -### Tamper-resistant credential governance + mass rotation/lockdown (Strand B) -Progress: 2/3 done | workplan_id: `21528e8d-a049-523d-9ae1-da7a27cb8bbf` - -**Open tasks:** -- · Task: Graded lockdown / break-glass with explicit trust-root `cae498ee` - -### Repoint the whynot-design npm lane to Forgejo -Progress: 2/3 done | workplan_id: `42a097db-1c24-558e-a724-030bb2b4443e` - -**Open tasks:** -- ! Prove routing and publication `a8b1b855` - *(wait: Hold kept by D3 until SECRETS-WP-0006-T06 moves publishing off the legacy whynot-design npm path; then rotate and prove a fresh publish.)* - -## Inbox Hygiene - -**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. -**Missing thread_id:** 3 unread message(s) lack supersession chains. - ---- -## MCP Orientation (when available) - -If the state-hub MCP server is reachable, call: -`get_domain_summary("infotech")` -This provides richer cross-domain context. -If the MCP call fails, use this file as your orientation source. diff --git a/.gitignore b/.gitignore index ddae26a..4c89b5b 100644 --- a/.gitignore +++ b/.gitignore @@ -176,3 +176,6 @@ cython_debug/ *.swp .claude/ralph-loop.local.md + +# Local State Hub orientation snapshot; authored work records remain tracked. +/.custodian-brief.md diff --git a/SCOPE.md b/SCOPE.md index 4c511c7..10ef89d 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -547,3 +547,11 @@ scanner routing; meaningful source commits regenerate the index before any configured scan. Generation performs no Hub calls, commits, pushes, credential access or live changes. Source inventories and other generated artifacts retain their owners. + +## Local orientation brief policy — 2026-10-19 + +`.custodian-brief.md` is a local, ignored State Hub orientation snapshot. Its +existing bytes remain available for offline session startup; refreshing it does +not require a Git commit. Authored workplans and the generated WORK-RECORDS index +retain their existing source and staged-generation contracts. No runtime or +credential change follows from this repository hygiene policy.