build: keep generated orientation brief local and untracked

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181

.custodian-brief.md

@@ -1,29 +0,0 @@
-<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
-# Custodian Brief — policy-nexus
-
-**Domain:** infotech  
-**Last synced:** 2026-10-11 18:53 UTC  
-**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
-
-## Active Workstreams
-
-### Publish the build-mode change authorization guardrail
-Progress: 0/2 done  |  workplan_id: `774c5037-a3d0-5e65-893c-d18970acd66a`
-
-**Open tasks:**
-- · Publish the standard on policy.coulomb.social  `ee3c6f88`
-- · Publish the machine-readable rule  `92247888`
-
-## Inbox Hygiene
-
-**Stale unread:** 6 message(s) older than 3 day(s) — triage at session start.
-**Missing thread_id:** 5 unread message(s) lack supersession chains.
-- ! flex-auth: FLEX-WP-0020 handoff request (other)  `d861dc4f`
-
----
-## MCP Orientation (when available)
-
-If the state-hub MCP server is reachable, call:
-`get_domain_summary("infotech")`
-This provides richer cross-domain context.
-If the MCP call fails, use this file as your orientation source.

.gitignore

@@ -3,3 +3,6 @@ __pycache__/
 build/source-inventory.json
 **/.ast_cache/
 build/source-inventory-review.json
+
+# Generated workstation orientation; keep local, regenerate from State Hub.
+/.custodian-brief.md

SCOPE.md

@@ -73,3 +73,11 @@ preserves authored dispositions and Git staging, and fails on unresolved discove
 changes. This optional review command does not apply candidate rows, publish,
 or bypass source-audit. The source inventory remains an explicit owner gate;
 WORK-RECORDS pre-commit generation does not reinterpret it as disposable output.
+
+
+## Local orientation brief
+
+`.custodian-brief.md` is a generated local orientation snapshot. It remains on
+disk for offline use and is root-ignored rather than versioned. Regenerate it
+with the State Hub brief renderer; workplans and other authored repository
+records remain authoritative. Brief refreshes must not create Git commits.