the-custodian/.custodian-brief.md
codex 3f6df63a9a
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
Record observed-usage spend settlement relaxation (rein-aharness, decision a93619a9)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 02:06:18 +02:00

3.9 KiB

Custodian Brief — the-custodian

Domain: infotech
Last synced: 2026-10-13 20:02 UTC
State Hub: http://127.0.0.1:8000 (adjust if running on a remote machine)

Active Workstreams

NetKingdom security blueprint and SEC-DSM gap closure

Progress: 2/5 done | workplan_id: dfadb19b-445e-59c6-bcd6-48e87b912c52

Open tasks:

  • ► Close source defects and reconcile uncovered lifecycle gaps 87637402
  • ► Coordinate self-service Playwright identity delivery ed8b909a
  • · Verify native closure against every requirement 82378b0f

Separate agent credentials and establish supervised privileged execution

Progress: 2/5 done | workplan_id: a98a9f34-83b4-5c8c-8107-e05f7806d50d

Open tasks:

  • ! Build and hand out the agent identity 4b88b0b7 (wait: Await GLAS-WP-0012 (glas-harness) production acceptance of the local supervised profile; then railiance-platform RBAC, railiance-enablement k3s config, railiance-infra principal mapping and ops-warden certificate issuance.)
  • ! Fleet guidance and harness guards 90725511 (wait: Await CUST-WP-0073-T02: the verified agent identity and execution path must exist before it can be documented; Codex/Grok read-denial guard needs glas-harness or harness-owner delivery.)
  • ! Rotate what was exposed 1b41b532 (wait: Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers below, in one attended rotation window.)

Size Railiance workloads from actual demand and establish a weekly allocation review

Progress: 1/5 done | workplan_id: 2249bddb-7524-5add-bd5c-c4163a6ca0f3

Open tasks:

  • ! Measure the Vergabe prototype under representative pilot use 82192370 (wait: Await RAPPS-WP-0014-T03 (blocked, needs_human): populated two-user/document workflow run by Bernd and the company contact, giving representative load for p95 <= 2s / zero failures.)
  • ! Review ecosystem allocations and reserve operating room 6dc67558 (wait: Await CUST-WP-0071-T02 representative sample; Forgejo/runner demand and zero-request workload review need owner input (railiance-cluster, railiance-forge, resource-control).)
  • ! Apply accepted sizing changes and verify their effects 944f98e2 (wait: Await reviewed allocation proposals and applicable workload-owner authority.)
  • ! Establish the regular weekly workload-demand and allocation assessment 20ddd4d7 (wait: Await the repeatable observation and accepted sizing/review procedure.)

Deterministic security flow: standing authorizations, flow report, and agent re-engagement

Progress: 3/7 done | workplan_id: ab288f92-d364-5c24-9362-aee451f266c3

Open tasks:

  • ! Schedule the flow report and decision sync 1be0569c (wait: Activity Core accepted the schedule in ACTIVITY-WP-0047. Await claiming rein workstation/hub acceptance, owner activation and the first unassisted fire with report/checkpoint evidence.)
  • ! Encode the standing change rule as a policy-nexus guardrail 5dd52156 (wait: policy-nexus owns guardrail publication; handoff written as PNEX-WP-0006.)
  • ! Stop agent-authored index and sync commits 8a3dc219 (wait: Local guard and repeatable shared-hook installation are implemented. Fleet generator adoption and the required full week of clean history remain unverified; repo-manager owner acceptance is needed.)
  • ! Attended window #1 e3da807f (wait: Partly done 2026-10-11: list cut from 14 to 3; U05-U07 accepted, U08 waits on KEY-WP-0040-T01. Remaining founder acts: USER-WP-0026-T03 readback, RPF-WP-0044-T08 coulombcore check, the U08 re-run, and Sol's added RPF-WP-0044-T04 issuer login.)

MCP Orientation (when available)

If the state-hub MCP server is reachable, call: get_domain_summary("infotech") This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.