build: adopt staged work-record index generation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181

.custodian-brief.md

@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-cluster
 
 **Domain:** financials  
-**Last synced:** 2026-10-13 18:24 UTC  
+**Last synced:** 2026-10-16 19:05 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Current Goal
@@ -11,12 +11,17 @@ Install k3s and Kubernetes Baseline on the HostEurope Server
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Review NetKingdom signer runtime and node-local storage readiness
+Progress: 1/3 done  |  workplan_id: `f383557d-c8a8-553e-adcd-9f82ff9c2929`
+
+**Open tasks:**
+- ► Review the bounded native preflight and storage action  `7f4320c6`
+- · Verify the approved runtime and storage result  `747a8d77`
 
 ## Inbox Hygiene
 
 **Stale unread:** 6 message(s) older than 3 day(s) — triage at session start.
-**Missing thread_id:** 6 unread message(s) lack supersession chains.
+**Missing thread_id:** 8 unread message(s) lack supersession chains.
 - ! the-custodian: Workplan 'three-phoenix-ha-cluster' is blocked with no wait task  `a1368d99`
 
 ---

.generated-work-records.json

@@ -0,0 +1 @@
+{"version":1,"repo_slug":"railiance-cluster"}

.generated-work-records.mk

@@ -0,0 +1,8 @@
+# Explicit opt-in recipe; no environment files or external make includes.
+CUSTODIAN_SOURCE ?= /home/worsch/the-custodian
+GENERATED_REPO_railiance-cluster ?= railiance-cluster
+.PHONY: generated-work-records generated-work-records-check
+generated-work-records:
+	python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-cluster)"
+generated-work-records-check:
+	python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-cluster)" --check

Makefile

@@ -52,3 +52,10 @@ help: ## Show this help
 	  /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) }' $(MAKEFILE_LIST)
 
 .PHONY: backup restore preflight k3s-install smoke cluster-observe test-unit test-ha-failover verify-activity-core reconcile-activity-core-llm-connect deploy-activity-core-triage-robustness admin-sync-smoke help
+
+# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe.
+.PHONY: generated-work-records generated-work-records-check
+generated-work-records:
+	$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records
+generated-work-records-check:
+	$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check

SCOPE.md

@@ -171,3 +171,16 @@ title: Kubernetes capacity and allocation observation
 description: Capture timestamped non-secret cluster capacity, scheduler-effective allocation, workload utilization and measurement gaps with make cluster-observe REMOTE=railiance01. Retain observations for resource-control and release preflight; residual requests are not measured spare processing capacity or admission.
 keywords: [capacity, allocation, kubernetes, utilization, sizing, evidence]
 ```
+
+
+## Generated work-record index
+
+This repository opts into staged-source WORK-RECORDS.md generation through
+`.generated-work-records.json` and the isolated `.generated-work-records.mk`
+recipe. `make generated-work-records` reuses the State Hub renderer through
+the Custodian adapter; `make generated-work-records-check` verifies byte-exact
+agreement with staged Markdown. The pre-commit hook uses the isolated recipe,
+preserves unstaged index edits by refusing them, and retains the generated-only
+commit guard and existing security checks. It does not contact the hub, alter
+workplan statuses or grant deployment authority. This consumes shared tooling;
+it does not make this repository the provider of the generator capability.

WORK-RECORDS.md

@@ -20,6 +20,8 @@
 | workplan | RCLUSTER-WP-0007 | backlog | — | workplans/RCLUSTER-WP-0007-threephoenix-ha-cluster.md |
 | workplan | RCLUSTER-WP-0014 | finished | — | workplans/RCLUSTER-WP-0014-capacity-utilization-and-allocation-evidence.md |
 | workplan | RCLUSTER-WP-0016 | finished | — | workplans/RCLUSTER-WP-0016-forgejo-upload-timeout.md |
+| workplan | RCLUSTER-WP-0017 | active | — | workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md |
+| workplan | RCLUSTER-WP-0018 | active | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |
 | task | RCLUSTER-WP-ADHOC-2026-07-27-T01 | done | — | workplans/ADHOC-2026-07-27.md |
 | task | RAIL-BS-WP-0008-T01 | done | — | workplans/RAIL-BS-WP-0008-activity-core-wp0016-triage-output-deploy.md |
 | task | RAIL-BS-WP-0008-T02 | done | — | workplans/RAIL-BS-WP-0008-activity-core-wp0016-triage-output-deploy.md |
@@ -60,3 +62,11 @@
 | task | RCLUSTER-WP-0014-T02 | done | — | workplans/RCLUSTER-WP-0014-capacity-utilization-and-allocation-evidence.md |
 | task | RCLUSTER-WP-0014-T03 | done | — | workplans/RCLUSTER-WP-0014-capacity-utilization-and-allocation-evidence.md |
 | task | RCLUSTER-WP-0016-T01 | done | — | workplans/RCLUSTER-WP-0016-forgejo-upload-timeout.md |
+| task | RCLUSTER-WP-0017-T01 | done | — | workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md |
+| task | RCLUSTER-WP-0017-T02 | progress | — | workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md |
+| task | RCLUSTER-WP-0017-T03 | todo | — | workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md |
+| task | RCLUSTER-WP-0018-T01 | done | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |
+| task | RCLUSTER-WP-0018-T02 | todo | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |
+| task | RCLUSTER-WP-0018-T03 | wait | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |
+| task | RCLUSTER-WP-0018-T04 | wait | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |
+| task | RCLUSTER-WP-0018-T05 | todo | — | workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md |