# Custodian Brief — secrets-engine **Domain:** infotech **Last synced:** 2026-06-29 22:49 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams ### Provision a scoped warden-sign token lane (ops-warden / FLEX-WP-0007 T4) Progress: 2/5 done | workstream_id: `eb1bdff7-909c-4391-8b95-6baf1feb3a54` **Open tasks:** - ! T03 - Apply against production OpenBao via bootstrap token `4b414788` *(wait: missing-approved-decision-and-bootstrap-token)* - ! T04 - Out-of-band handoff and non-secret pointers `52b5cf88` *(wait: awaiting-live-apply-and-out-of-band-handoff)* - ! T05 - Confirm the joint smoke and signal ops-warden `aa0f281e` ### Close out the whynot-design npm publish pilot (real) Progress: 1/5 done | workstream_id: `07ee9cee-3efb-4abc-89a8-a30436d6a601` **Open tasks:** - ! T02 - Stand up a dedicated Gitea bot account for the repo-scoped grant `13a34d32` - ! T03 - Provision the real npm token without disclosure `746b5e7f` - ! T04 - Real `npm publish` of @whynot/design through secrets-engine exec `36b925c2` - ► T05 - Hand the routing contract to ops-warden (cross-repo) `461a7854` --- ## MCP Orientation (when available) If the state-hub MCP server is reachable, call: `get_domain_summary("infotech")` This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.