<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — ops-warden

**Domain:** infotech  
**Last synced:** 2026-09-28 22:31 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### Adopt unknown -> fail_closed behind signing-target classification coverage
Progress: 1/4 done  |  workplan_id: `c8ee441e-1be1-5219-910c-e79ff23cc9ec`

**Open tasks:**
- ! Tasks  `611f0901`
- ! Tasks  `54ad4864`
  *(wait: Owners of agt-codex-interhub-bootstrap, agt-state-hub-bridge and atm-backup-daily must publish authoritative workload identity declarations.)*
- ! Tasks  `93eaf1f2`
  *(wait: Gated on T01 and on layer model v0.8 (or successor) reaching accepted; never convert against a proposed standard.)*

### Layer model v0.7 conformance — state the deadline, bind the agent boundary, steward the estate's newest rule
Progress: 5/6 done  |  workplan_id: `ae3ff76f-883d-5e2f-b6aa-144d61e8fdef`

**Open tasks:**
- ! Tasks  `7d1b3c82`
  *(wait: Two items to route, not absorb: ops-mason has published no stance map; the second is another repository's to own.)*

### Tamper-resistant credential governance + mass rotation/lockdown (Strand B)
Progress: 2/3 done  |  workplan_id: `21528e8d-a049-523d-9ae1-da7a27cb8bbf`

**Open tasks:**
- ! Task: Graded lockdown / break-glass with explicit trust-root  `cae498ee`
  *(wait: Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invocation; executable seal steps are attended.)*

### Repoint the whynot-design npm lane to Forgejo
Progress: 2/3 done  |  workplan_id: `42a097db-1c24-558e-a724-030bb2b4443e`

**Open tasks:**
- ! Prove routing and publication  `a8b1b855`

### Preserve explicit policy caller refusals before credential and CA effects
Progress: 2/3 done  |  workplan_id: `ae44a935-6fca-514c-a385-4550dd2b1fe8`

**Open tasks:**
- ! Resolve the credential proxy's admitted policy binding  `8ca28b63`
  *(wait: The configured ops-warden caller represents ops-warden; credential requests name their owner as resource.system. Need the flex-auth/credential-owner contract for that exact delegated read, without broadening caller bindings or relabelling resource ownership.)*

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("infotech")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.