the-custodian/docs/changes/netkingdom-target-2026-10-16/decision-auth/access-engine-original-dirty.patch
codex 014bbd2893
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 11s
docs: preserve reviewed NetKingdom session artifacts
2026-11-01 22:58:27 +01:00

77 lines
4.7 KiB
Diff

diff --git a/.custodian-brief.md b/.custodian-brief.md
index d3d8eba..b392557 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
# Custodian Brief — access-engine
**Domain:** infotech
-**Last synced:** 2026-10-11 18:38 UTC
+**Last synced:** 2026-10-11 21:31 UTC
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
## Active Workstreams
@@ -12,7 +12,7 @@ Progress: 5/9 done | workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
**Open tasks:**
- ! 2. Register flex-auth as an audit-core sender `89661908`
- *(wait: AUDIT-IN-0006 sender rows and governed token delivery remain pending; gate-house GH-WP-0004-T12 must rule on the load-bearing failure-path exception.)*
+ *(wait: GH-WP-0004-T12 refused the load-bearing failure-path exception (GH-DEC-2026-024). AUDIT-IN-0006 sender rows and governed token delivery remain pending.)*
- ! 4. Close G2 `423b3090`
*(wait: G2 needs T08 native heartbeat/drain and silence-finding evidence plus T06 reconciliation; local tests cannot close the delivery gap.)*
- ! 6. Reconciliation, profile check, and storage `bf92a951`
@@ -24,12 +24,12 @@ Progress: 5/9 done | workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
Progress: 0/8 done | workplan_id: `af0f8d77-af04-569b-8e79-6c47eb8f1087`
**Open tasks:**
+- ! Make the PDP accept both names `487525e5`
+- ! Stand up the access-engine namespace next to flex-auth `13b93d7a`
+- ! Consumers switch over, one at a time `f0470e5c`
- ► Decide the target names and supersede the retain table `4f9a796d`
- ► Inventory every consumer reference and open handoffs `8f597899`
- ► Rename the source `ff7fd369`
-- · Make the PDP accept both names `487525e5`
-- · Stand up the access-engine namespace next to flex-auth `13b93d7a`
-- · Consumers switch over, one at a time `f0470e5c`
- · Retire the flex-auth runtime `e46c9c8e`
- … and 1 more open tasks
@@ -38,14 +38,14 @@ Progress: 10/11 done | workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
**Open tasks:**
- ! 11. Soak, hand off residuals, and clean up the old checkout `46d8318b`
- *(wait: Needs SBOM-IN-0001 catch-up receipt, secrets-engine coordinate correction and railiance-fabric residual disposition, observed soak evidence, and exact checkout cleanup approval under e071b34e-c4d4-49d0-824d-2c58bb0ae496.)*
+ *(wait: Cleanup approved conditionally (e071b34e): runs once the listed soak evidence, SBOM-IN-0001 receipt and residual handoffs exist.)*
### 2026-10-03 secret-read evaluator for ops-warden fetch checks
Progress: 1/2 done | workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
**Open tasks:**
- ! Deploy the pin (founder go required) `aa00b29f`
- *(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)*
+ *(wait: Install accepted retroactively (877c268b); steps 6-7 follow WARDEN-WP-0039-T03 token receipts and fetch URL.)*
## Inbox Hygiene
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 62ffebf..2268973 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -214,12 +214,12 @@
| task | FLEX-WP-0035-T03 | done | — | workplans/FLEX-WP-0035-per-identity-application-readback.md |
| task | FLEX-WP-0035-T04 | done | — | workplans/FLEX-WP-0035-per-identity-application-readback.md |
| task | FLEX-WP-0035-T05 | done | — | workplans/FLEX-WP-0035-per-identity-application-readback.md |
-| task | FLEX-WP-0036-T01 | progress | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
+| task | FLEX-WP-0036-T01 | wait | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
| task | FLEX-WP-0036-T02 | progress | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
-| task | FLEX-WP-0036-T03 | todo | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
-| task | FLEX-WP-0036-T04 | progress | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
-| task | FLEX-WP-0036-T05 | todo | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
-| task | FLEX-WP-0036-T06 | todo | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
+| task | FLEX-WP-0036-T03 | wait | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
+| task | FLEX-WP-0036-T04 | wait | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
+| task | FLEX-WP-0036-T05 | wait | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
+| task | FLEX-WP-0036-T06 | wait | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
| task | FLEX-WP-0036-T07 | todo | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
| task | FLEX-WP-0036-T08 | todo | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
| intake | FLEX-IN-0001 | closed | — | intakes/intakes.md |