diff --git a/.custodian-brief.md b/.custodian-brief.md index 1472646..7408678 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,21 +2,11 @@ # Custodian Brief — railiance-platform **Domain:** financials -**Last synced:** 2026-10-03 23:10 UTC +**Last synced:** 2026-10-04 14:33 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams -### Prepare generated attended windows and explicit value-custody choice -Progress: 1/4 done | workplan_id: `0c7e3b0c-1c36-568c-af51-b06f912a0f1d` - -**Open tasks:** -- ! Obtain exact founder value-custody choice `99b73b3f` - *(wait: Founder must explicitly choose batched attended custody, response-wrapped issuer delivery, or scoped MFA silent writer, and approve its exact boundary. Generic D3 resolution without this disposition is insufficient.)* -- ! Bind a real dated window and owner receipt manifests `1ae5a6b8` - *(wait: Custodian must return the reviewed cadence/window date and current owner task scope before a real metadata manifest is assembled; exact founder execution authorization remains separate.)* -- · Accept platform seam for catalog lane scaffold proposal `6475d924` - ### Coordinate audit-core temporary custody and recovery exercises Progress: 2/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac` @@ -26,12 +16,15 @@ Progress: 2/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac` - ! T03 — Define the coordinated railiance01 reboot exercise `ba729d18` *(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)* -### Close Forgejo primary backup coverage on Scaleway -Progress: 3/4 done | workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455` +### Onboard rapp-policy-nexus to the ArgoCD production lane +Progress: 2/5 done | workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c` **Open tasks:** -- ! Establish primary full-archive delivery and application recovery `a4807df0` - *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)* +- ! Prepare the Application and the dry-run evidence `2afb1aac` + *(wait: Draft the Application only after the tenant decision in T02.)* +- ! Adopt policy-nexus (live, founder go-ahead) `8638fa73` + *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)* +- · Agree where policy-nexus's manifests live `49143c5e` ### ArgoCD phase B: adopt the four existing Applications on railiance01 Progress: 2/8 done | workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc` @@ -50,15 +43,14 @@ Progress: 2/8 done | workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc` - ! Plan phase C: retire coulombcore's ArgoCD `55d1382f` *(wait: Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope.)* -### Onboard rapp-policy-nexus to the ArgoCD production lane -Progress: 2/5 done | workplan_id: `ec41a4bd-df18-5b07-9b63-ccb80d9f001c` +### Coordinate KeyCape live Secret exposure recovery +Progress: 4/6 done | workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e` **Open tasks:** -- ! Prepare the Application and the dry-run evidence `2afb1aac` - *(wait: Draft the Application only after the tenant decision in T02.)* -- ! Adopt policy-nexus (live, founder go-ahead) `8638fa73` - *(wait: Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07.)* -- · Agree where policy-nexus's manifests live `49143c5e` +- ! T03 — Collect exact owner acknowledgements `714ae011` + *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)* +- ! T06 — Publish the Railiance/OpenBao custody handoff `3b9748c4` + *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)* ### Close S3 service assurance and ownership gaps Progress: 4/7 done | workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84` @@ -71,6 +63,15 @@ Progress: 4/7 done | workplan_id: `ca639c3d-3a87-5fa4-ad13-6f2e014b0c84` - ! Obtain acceptance for compatibility assets and derived-record cleanup `3b74f79c` *(wait: Owner-ready handoffs to railiance-forge, rapp-openbao and the ArgoCD bootstrap owner await acceptance; S3 custody contracts stay here until then.)* +### Prepare and admit informed-decision requester workload delivery +Progress: 1/3 done | workplan_id: `a27c47bc-4b0d-513b-bfb2-1eb404fde5a9` + +**Open tasks:** +- ! Obtain exact owner runtime and binding acceptance `dfc17e0a` + *(wait: Binding/mount and requester exchange source accepted at informed-decision f06b7e9. Independent owner private-listener/runtime configuration, CA-verified TokenReview transport, deployment/RBAC/network proposal and immutable image/config source receipt remain; full live INFD-WP-0005-T05 completion is not a predecessor.)* +- ! Apply and accept the scoped workload delivery `abbe62c9` + *(wait: Founder approved the design boundary for owner integration on 2026-10-04. Exact owner runtime/binding acceptance, final execution packet and separate founder live go remain before attended metadata apply and ESO/runtime promotion.)* + ### Adopt activity-core application runtime into railiance01 GitOps Progress: 2/3 done | workplan_id: `b8cf2fc2-60c2-5d4e-a60a-55f1304d9f54` @@ -78,21 +79,19 @@ Progress: 2/3 done | workplan_id: `b8cf2fc2-60c2-5d4e-a60a-55f1304d9f54` - ! Observe adoption and enforce bounded promotion readiness `63b44949` *(wait: 24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; ACTIVITY-WP-0041 owns publication and the promotion guard.)* -### Coordinate KeyCape live Secret exposure recovery -Progress: 4/6 done | workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e` +### Prepare generated attended windows and explicit value-custody choice +Progress: 3/4 done | workplan_id: `0c7e3b0c-1c36-568c-af51-b06f912a0f1d` **Open tasks:** -- ! T03 — Collect exact owner acknowledgements `714ae011` - *(wait: Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session.)* -- ! T06 — Publish the Railiance/OpenBao custody handoff `3b9748c4` - *(wait: Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred.)* +- ! Bind a real dated window and owner receipt manifests `1ae5a6b8` + *(wait: Platform preparation and founder design choice are complete. Independent informed-decision runtime source/publication, KeyCape custody/registration/issuance, secrets-engine consumer custody coordinates and provider setup-link handoff remain; dependency-requirements.md names the exact owner deliveries.)* ### Implement reviewed credential lanes with separate owner gates Progress: 3/8 done | workplan_id: `975db491-5412-5e27-8e34-14a2417bb039` **Open tasks:** - ! Accept and provision secrets-engine service JWT login `e0c82ea9` - *(wait: SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client secrets-engine-openbao and its protected client-credential custody (contract: separate approved custody action; no owning task id yet, asked key-cape 2026-10-03). The design requires both before any write; then a reviewed child and the attended founder apply.)* + *(wait: KEY-WP-0037 now owns protected custody, real registration and native issuance. Platform issuer-reader source CCR-2026-0033 is prepared. secrets-engine must accept exact consumer host/file/delivery/rotation coordinates before the separate custody child is finalized; KeyCape exact-primary identity repair and separate live go remain.)* - ! Implement the platform operator-write CCR contract and Fluid lane `f47e5bc5` *(wait: Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema.)* - ! Admit the separate approval client-side readers `68bff751` @@ -102,6 +101,13 @@ Progress: 3/8 done | workplan_id: `975db491-5412-5e27-8e34-14a2417bb039` - ! Admit the two factory audit-sender custody lanes `0ef52c26` *(wait: Provisioned and delivered 2026-09-11 (CCR-2026-0021/0022 applied); do not repeat. Receiver rollout with evidence_kind and native producer acceptance passed 2026-09-11. Remaining human acceptance: independent archive readback and revocation of the interim audit bearer tokens.)* +### Close Forgejo primary backup coverage on Scaleway +Progress: 3/4 done | workplan_id: `7beec1a7-aa82-5a36-9a66-6b60008a2455` + +**Open tasks:** +- ! Establish primary full-archive delivery and application recovery `a4807df0` + *(wait: Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval.)* + ### Coordinate KeyCape live Secret exposure recovery Progress: 4/6 done | workplan_id: `038bc3c0-4492-5b91-95eb-ae515ca205df` @@ -126,11 +132,6 @@ Progress: 2/3 done | workplan_id: `6f8a6cbc-c076-5f0a-ade2-281a7ec71360` **Open tasks:** - ! T03 — Complete the attended operator cutover `99f8b41f` -## Inbox Hygiene - -**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. -**Missing thread_id:** 3 unread message(s) lack supersession chains. - --- ## MCP Orientation (when available)