user-engine/.custodian-brief.md

<!-- custodian-brief: generated by fix-consistency — do not edit manually -->
# Custodian Brief — user-engine

**Domain:** communication  
**Last synced:** 2026-08-19 07:51 UTC  
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*

## Active Workstreams

### Bind user-engine to flex-auth with rotating workload identity
Progress: 2/3 done  |  workplan_id: `014d0886-b690-4860-8337-c718e440f678`

**Open tasks:**
- ! USER-WP-0023 — flex-auth caller identity  `0499c65b`

### Public registration and JIT application profiles
Progress: 3/5 done  |  workplan_id: `97145e5b-5f8f-4cb1-9135-2593f5baac8f`

**Open tasks:**
- ! T01 - Publish the public registration journey  `43dd49b7`
- ► T05 - Registration and JIT security matrix  `0a5a5f3a`

---
## MCP Orientation (when available)

If the state-hub MCP server is reachable, call:
`get_domain_summary("communication")`
This provides richer cross-domain context.
If the MCP call fails, use this file as your orientation source.