# Custodian Brief — flex-auth **Domain:** netkingdom **Last synced:** 2026-05-17 04:41 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams ### Delegated PDP and Directory Adapters Progress: 0/6 done | workstream_id: `99a82976-d376-42b0-89cc-c44e01c0bec6` **Open tasks:** - · P4.1 - Evaluate Topaz as MVP delegated backend `9046418c` - · P4.2 - Add relationship PDP adapter boundary `b77a0b70` - · P4.3 - Add rule PDP adapter boundary `4e4e5e45` - · P4.4 - Add Keycloak Authorization Services adapter path `8d3bbc28` - · P4.5 - Add Entra/Graph and SCIM group resolver adapters `4fc3fb91` - · P4.6 - Add delegated-mode operations docs `491260f9` --- ## MCP Orientation (when available) If the state-hub MCP server is reachable, call: `get_domain_summary("netkingdom")` This provides richer cross-domain context. If the MCP call fails, use this file as your orientation source.