user-engine/.custodian-brief.md

<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — user-engine

**Domain:** communication  
**Last synced:** 2026-09-22 14:15 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### Follow the flex-auth to access-engine repository rename (FLEX-WP-0020 handoff)
Progress: 1/2 done  |  workplan_id: `0b948be1-ad75-5548-b4eb-aabc8e3ae6cc`

**Open tasks:**
- ! Re-point the absolute source path after the rename lands  `e945b036`

### User account journeys and recovery
Progress: 1/3 done  |  workplan_id: `145df9d5-a7e9-5d20-8280-9d3ea069838b`

**Open tasks:**
- ! Complete optional OTP onboarding with provider evidence  `40e46e52`
- · Connect authoritative application access  `5d1bf977`

### Clear account state and complete user, tenant-admin and platform-admin journeys
Progress: 4/6 done  |  workplan_id: `455300ca-ec1e-569e-a584-a8dcda2595cf`

**Open tasks:**
- ! Complete provider OTP activation and recovery path  `9657abcb`
- ► Validate all journeys across roles and applications  `550886ca`

### Account recovery and visible identity and access
Progress: 1/3 done  |  workplan_id: `0aea0a52-13f9-515b-bda8-665f8a4f2d5e`

**Open tasks:**
- ► Publish and verify the recovery flow  `ad5b0a77`
- · Discover workload access from authoritative application records  `95e9a6d4`

### Make operator navigation and portal logout usable during demo onboarding
Progress: 2/3 done  |  workplan_id: `85391398-f5be-551b-b90d-c8e987a00098`

**Open tasks:**
- ► Coordinate provider-wide sign-out and account switching  `f5ee70b9`

## Inbox Hygiene

**Stale unread:** 1 message(s) older than 3 day(s) — triage at session start.
**Missing thread_id:** 2 unread message(s) lack supersession chains.
- ! flex-auth: FLEX-WP-0020 handoff request (documentation)  `94fd6ef0`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("communication")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.