From 2b14d41d0accd928709f7b2b7017906a57ba4ea0 Mon Sep 17 00:00:00 2001 From: custodian-sync Date: Fri, 9 Oct 2026 11:47:32 +0200 Subject: [PATCH] chore(consistency): sync task status from DB [auto] Updated by fix-consistency on 2026-10-09: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9 --- .custodian-brief.md | 54 +++++++++++++++++++++------------------------ 1 file changed, 25 insertions(+), 29 deletions(-) diff --git a/.custodian-brief.md b/.custodian-brief.md index 226c09c..4be998b 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,19 +2,28 @@ # Custodian Brief — railiance-platform **Domain:** financials -**Last synced:** 2026-10-08 22:32 UTC +**Last synced:** 2026-10-09 09:47 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams -### Coordinate audit-core temporary custody and recovery exercises -Progress: 2/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac` +### Coordinate KeyCape live Secret exposure recovery +Progress: 4/6 done | workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e` **Open tasks:** -- ! T02 — Define the runtime database lease recovery exercise `fda4262a` - *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)* -- ! T03 — Define the coordinated railiance01 reboot exercise `ba729d18` - *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)* +- ! T03 — Collect exact owner acknowledgements `714ae011` + *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)* +- ! T06 — Publish the Railiance/OpenBao custody handoff `3b9748c4` + *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)* + +### Onboard rapp-policy-nexus to the ArgoCD production lane +Progress: 3/5 done | workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c` + +**Open tasks:** +- ! Adopt policy-nexus (live, founder go-ahead) `8638fa73` + *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)* +- ! Prepare the Application and the dry-run evidence `2afb1aac` + *(wait: Draft is prepared. The attended read-only helm history / kubectl diff remains. This session did not touch the cluster.)* ### ArgoCD phase B: adopt the four existing Applications on railiance01 Progress: 2/8 done | workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc` @@ -40,15 +49,6 @@ Progress: 3/4 done | workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455` - ! Establish primary full-archive delivery and application recovery `a4807df0` *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)* -### Coordinate KeyCape live Secret exposure recovery -Progress: 4/6 done | workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e` - -**Open tasks:** -- ! T03 — Collect exact owner acknowledgements `714ae011` - *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)* -- ! T06 — Publish the Railiance/OpenBao custody handoff `3b9748c4` - *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)* - ### Close S3 service assurance and ownership gaps Progress: 4/7 done | workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84` @@ -67,6 +67,15 @@ Progress: 2/3 done | workplan_id: `b8cf2fc2-60c2-5d4e-a60a-55f1304d9f54` - ! Observe adoption and enforce bounded promotion readiness `63b44949` *(wait: 24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; ACTIVITY-WP-0041 owns publication and the promotion guard.)* +### Coordinate audit-core temporary custody and recovery exercises +Progress: 2/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac` + +**Open tasks:** +- ! T02 — Define the runtime database lease recovery exercise `fda4262a` + *(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)* +- ! T03 — Define the coordinated railiance01 reboot exercise `ba729d18` + *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)* + ### Prepare generated attended windows and explicit value-custody choice Progress: 3/4 done | workplan_id: `0c7e3b0c-1c36-568c-af51-b06f912a0f1d` @@ -91,15 +100,6 @@ Progress: 3/9 done | workplan_id: `975db491-5412-5e27-8e34-14a2417bb039` - ! Founder approval of the CCR-2026-0033 custody child `7c753be6` *(wait: Waits for founder approvals: A1 ops-mason design (keycape-secrets-engine-openbao-client-custody, MASON-WP-0009); A2 revised CCR-2026-0033 plus sibling operator reader CCR-2026-0034 (platform-owner, key-cape-owner, net-kingdom-owner reviews; bound claims confirmed for both readers incl. groups=net-kingdom-admins and /assurance/level=aal2); A3 the exact custody-child decision id recorded in the CCR-2026-0033 review (not boundary decision 632a8893). secrets-engine D1-D4 are superseded (no consumer copy).)* -### Onboard rapp-policy-nexus to the ArgoCD production lane -Progress: 3/5 done | workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c` - -**Open tasks:** -- ! Adopt policy-nexus (live, founder go-ahead) `8638fa73` - *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)* -- ! Prepare the Application and the dry-run evidence `2afb1aac` - *(wait: Draft is prepared. The attended read-only helm history / kubectl diff remains. This session did not touch the cluster.)* - ### Coordinate KeyCape live Secret exposure recovery Progress: 4/6 done | workplan_id: `038bc3c0-4492-5b91-95eb-ae515ca205df` @@ -124,10 +124,6 @@ Progress: 2/3 done | workplan_id: `6f8a6cbc-c076-5f0a-ade2-281a7ec71360` **Open tasks:** - ! T03 — Complete the attended operator cutover `99f8b41f` -## Inbox Hygiene - -**Missing thread_id:** 2 unread message(s) lack supersession chains. - --- ## MCP Orientation (when available)