coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
ops-warden/.custodian-brief.md
custodian-sync f9dddb4069
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-09-29:
  - update .custodian-brief.md for ops-warden

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 237582@bnt-lap001
Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
2026-09-29 00:31:17 +02:00

2.4 KiB
Raw Blame History

Custodian Brief — ops-warden

Domain: infotech
Last synced: 2026-09-28 22:31 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

Adopt unknown -> fail_closed behind signing-target classification coverage

Progress: 1/4 done | workplan_id: c8ee441e-1be1-5219-910c-e79ff23cc9ec

Open tasks:

  • ! Tasks 611f0901
  • ! Tasks 54ad4864 (wait: Owners of agt-codex-interhub-bootstrap, agt-state-hub-bridge and atm-backup-daily must publish authoritative workload identity declarations.)
  • ! Tasks 93eaf1f2 (wait: Gated on T01 and on layer model v0.8 (or successor) reaching accepted; never convert against a proposed standard.)

Layer model v0.7 conformance — state the deadline, bind the agent boundary, steward the estate's newest rule

Progress: 5/6 done | workplan_id: ae3ff76f-883d-5e2f-b6aa-144d61e8fdef

Open tasks:

  • ! Tasks 7d1b3c82 (wait: Two items to route, not absorb: ops-mason has published no stance map; the second is another repository's to own.)

Tamper-resistant credential governance + mass rotation/lockdown (Strand B)

Progress: 2/3 done | workplan_id: 21528e8d-a049-523d-9ae1-da7a27cb8bbf

Open tasks:

  • ! Task: Graded lockdown / break-glass with explicit trust-root cae498ee (wait: Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invocation; executable seal steps are attended.)

Repoint the whynot-design npm lane to Forgejo

Progress: 2/3 done | workplan_id: 42a097db-1c24-558e-a724-030bb2b4443e

Open tasks:

  • ! Prove routing and publication a8b1b855

Preserve explicit policy caller refusals before credential and CA effects

Progress: 2/3 done | workplan_id: ae44a935-6fca-514c-a385-4550dd2b1fe8

Open tasks:

  • ! Resolve the credential proxy's admitted policy binding 8ca28b63 (wait: The configured ops-warden caller represents ops-warden; credential requests name their owner as resource.system. Need the flex-auth/credential-owner contract for that exact delegated read, without broadening caller bindings or relabelling resource ownership.)

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.