# Custodian Brief — secrets-engine **Domain:** infotech **Last synced:** 2026-07-03 14:34 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams ### Close out the whynot-design npm publish pilot (real) Progress: 2/5 done | workstream_id: `07ee9cee-3efb-4abc-89a8-a30436d6a601` **Open tasks:** - ! T02 - Stand up a dedicated Gitea bot account for the repo-scoped grant `13a34d32` *(wait: awaiting-gitea-bot-account-evidence)* - ! T03 - Provision the real npm token without disclosure `746b5e7f` *(wait: missing-prod-bootstrap-and-package-token-handoff-files)* - ! T04 - Real `npm publish` of @whynot/design through secrets-engine exec `36b925c2` *(wait: native-secrets-engine-publish-evidence-pending)* --- ## MCP Orientation (when available) If the state-hub MCP server is reachable, call: `get_domain_summary("infotech")` This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.