diff --git a/docs/cloudflare-mcp.md b/docs/cloudflare-mcp.md index 3a16a74..24ea0d3 100644 --- a/docs/cloudflare-mcp.md +++ b/docs/cloudflare-mcp.md @@ -79,7 +79,7 @@ instead of being preserved as user-added servers. ## Identity and scope -Interim OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B) per the +Interim OAuth identity is `REDACTED-operator-google-account` (Option B) per the operator Cloudflare admin identity decision. The target identity is `guardian@thenash.group` (Option C) after the Phase 2 Cloudflare account email migration lands. diff --git a/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md b/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md index fa6cf9a..8554f45 100644 --- a/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md +++ b/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md @@ -54,7 +54,7 @@ reply. ```text Cloudflare account: single account; owner - jeffreyverlynjohnson@gmail.com + REDACTED-operator-google-account Cloudflare team: same account; team name "homezerotrust"; team domain homezerotrust.cloudflareaccess.com @@ -127,7 +127,7 @@ Enrollment Access policies: Kid emails today: `axelptjohnson@gmail.com`, `ilagenevievemary@gmail.com`, `wynrjohnson@gmail.com`. -Adult emails: `jeffreyverlynjohnson@gmail.com`, +Adult emails: `REDACTED-operator-google-account`, `jakeshamus51@gmail.com`. All custom device profiles include `192.168.0.0/24` (home LAN) in diff --git a/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md b/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md index 6c58e7b..0eb7d5a 100644 --- a/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md +++ b/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md @@ -86,7 +86,7 @@ traffic by identity: | Windows account family | Registration identity | Target device profile | Notes | |---|---|---|---| -| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `jeffreyverlynjohnson@gmail.com` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. | +| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `REDACTED-operator-google-account` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. | | `MAMAWORK\ahnie` / Mama / Litecky Editing Services operator | Mama/Litecky identity, TBD | Adults, Litecky, or another adult-work profile | `ahnie` is an intentional local Administrator and must not be forced into Kids profile by the Cloudflare One Client cutover. family-cloudflare may need a policy-inputs update if the identity is not already in an adult/work group. | | Kid accounts (`axelp`, `ilage`, `wynst`, or corrected account names after operator confirmation) | Each kid's own Cloudflare identity | Kids profile | Kids profile remains locked and should continue to apply to the kids' school/learning sessions. | | Windows pre-login / no active user | Service-token registration if enabled | Headless/MDM or pre-login profile | Recommended for accurate baseline connectivity and to avoid stale previous-user attribution at the login screen. | diff --git a/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md b/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md index 15cf6e1..52e3447 100644 --- a/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md +++ b/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md @@ -70,7 +70,7 @@ Cloudflare designer can finalize assignments. | Role | Name | Primary identity (preferred for Cloudflare auth) | Other identities | |---|---|---|---| -| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `jeffreyverlynjohnson@gmail.com` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) | +| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `REDACTED-operator-google-account` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) | **Notes:** @@ -840,7 +840,7 @@ that answers, at minimum: 11. The operator-side identity inventory is now complete on the jefahnierocks side: - Jeff: `jeffrey@happy-patterns.com` (primary work); - `jeffreyverlynjohnson@gmail.com` (personal). + `REDACTED-operator-google-account` (personal). - Ahnie: `ahnielitecky@gmail.com` (jefahnierocks-managed Google identity). - Axel: `axelptjohnson@gmail.com`. diff --git a/docs/google-admin-tooling.md b/docs/google-admin-tooling.md index 745f172..04e8d17 100644 --- a/docs/google-admin-tooling.md +++ b/docs/google-admin-tooling.md @@ -36,8 +36,8 @@ The active local configuration is intentionally neutral: |--------|--------|---------|---------| | `thenash-guardian` | yes | `guardian@thenash.group` | unset | | `default` | no | `jeffrey@happy-patterns.com` | `happy-playground-463417` | -| `scopecam-production` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` | -| `scopecam-qa` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` | +| `scopecam-production` | no | `REDACTED-operator-google-account` | `scopecam-qa` | +| `scopecam-qa` | no | `REDACTED-operator-google-account` | `scopecam-qa` | The Guardian config must not be bound to `scopecam-qa` or any Happy Patterns-owned project unless the operator explicitly asks for that project diff --git a/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md b/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md index 5c94e80..2cc4092 100644 --- a/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md +++ b/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md @@ -206,7 +206,7 @@ not change the broker's other contracts: requests, responses, and rollbacks The identity transition is also part of the baseline. The interim operator -OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B); the Phase C +OAuth identity is `REDACTED-operator-google-account` (Option B); the Phase C target identity is `guardian@thenash.group`, with the Cloudflare account email migration target date of 2026-07-15, per parent identifier `OPERATOR-CLOUDFLARE-ADMIN-IDENTITY-DECISION-2026-05-16.md`. The broker's diff --git a/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md b/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md index 90edcf5..5c71430 100644 --- a/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md +++ b/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md @@ -13,7 +13,7 @@ priority: high **STAGED, NOT APPLIED.** This proposal does **not** change `policies/host-capability-substrate/tiers.yaml` bytes. That file is -operator-approved governance (`approved_by: jeffreyverlynjohnson@gmail.com`, +operator-approved governance (`approved_by: REDACTED-operator-google-account`, `approved_at: 2026-05-18T17:10:15Z`), so any byte change requires operator sign-off **and** a coordinated HCS snapshot re-vendor to keep the HCS generated snapshot byte-identical. This doc hands the operator the exact diff and the