jefahnierocks · verlyn13 · Aug 14, 2026 · Aug 14, 2026
@@ -79,7 +79,7 @@ instead of being preserved as user-added servers.
 
 ## Identity and scope
 
-Interim OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B) per the
+Interim OAuth identity is `REDACTED-operator-google-account` (Option B) per the
 operator Cloudflare admin identity decision. The target identity is
 `guardian@thenash.group` (Option C) after the Phase 2 Cloudflare account email
 migration lands.

@@ -54,7 +54,7 @@ reply.
 
 ```text
 Cloudflare account:           single account; owner
-                              jeffreyverlynjohnson@gmail.com
+                              REDACTED-operator-google-account
 Cloudflare team:              same account; team name "homezerotrust";
                               team domain
                               homezerotrust.cloudflareaccess.com
@@ -127,7 +127,7 @@ Enrollment Access policies:
 
 Kid emails today: `axelptjohnson@gmail.com`,
 `ilagenevievemary@gmail.com`, `wynrjohnson@gmail.com`.
-Adult emails: `jeffreyverlynjohnson@gmail.com`,
+Adult emails: `REDACTED-operator-google-account`,
 `jakeshamus51@gmail.com`.
 
 All custom device profiles include `192.168.0.0/24` (home LAN) in

@@ -86,7 +86,7 @@ traffic by identity:
 
 | Windows account family | Registration identity | Target device profile | Notes |
 |---|---|---|---|
-| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `jeffreyverlynjohnson@gmail.com` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. |
+| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `REDACTED-operator-google-account` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. |
 | `MAMAWORK\ahnie` / Mama / Litecky Editing Services operator | Mama/Litecky identity, TBD | Adults, Litecky, or another adult-work profile | `ahnie` is an intentional local Administrator and must not be forced into Kids profile by the Cloudflare One Client cutover. family-cloudflare may need a policy-inputs update if the identity is not already in an adult/work group. |
 | Kid accounts (`axelp`, `ilage`, `wynst`, or corrected account names after operator confirmation) | Each kid's own Cloudflare identity | Kids profile | Kids profile remains locked and should continue to apply to the kids' school/learning sessions. |
 | Windows pre-login / no active user | Service-token registration if enabled | Headless/MDM or pre-login profile | Recommended for accurate baseline connectivity and to avoid stale previous-user attribution at the login screen. |

@@ -70,7 +70,7 @@ Cloudflare designer can finalize assignments.
 
 | Role | Name | Primary identity (preferred for Cloudflare auth) | Other identities |
 |---|---|---|---|
-| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `jeffreyverlynjohnson@gmail.com` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) |
+| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `REDACTED-operator-google-account` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) |
 
 **Notes:**
 
@@ -840,7 +840,7 @@ that answers, at minimum:
 11. The operator-side identity inventory is now complete on
     the jefahnierocks side:
     - Jeff: `jeffrey@happy-patterns.com` (primary work);
-      `jeffreyverlynjohnson@gmail.com` (personal).
+      `REDACTED-operator-google-account` (personal).
     - Ahnie: `ahnielitecky@gmail.com` (jefahnierocks-managed
       Google identity).
     - Axel: `axelptjohnson@gmail.com`.

@@ -36,8 +36,8 @@ The active local configuration is intentionally neutral:
 |--------|--------|---------|---------|
 | `thenash-guardian` | yes | `guardian@thenash.group` | unset |
 | `default` | no | `jeffrey@happy-patterns.com` | `happy-playground-463417` |
-| `scopecam-production` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` |
-| `scopecam-qa` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` |
+| `scopecam-production` | no | `REDACTED-operator-google-account` | `scopecam-qa` |
+| `scopecam-qa` | no | `REDACTED-operator-google-account` | `scopecam-qa` |
 
 The Guardian config must not be bound to `scopecam-qa` or any Happy
 Patterns-owned project unless the operator explicitly asks for that project

@@ -206,7 +206,7 @@ not change the broker's other contracts:
   requests, responses, and rollbacks
 
 The identity transition is also part of the baseline. The interim operator
-OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B); the Phase C
+OAuth identity is `REDACTED-operator-google-account` (Option B); the Phase C
 target identity is `guardian@thenash.group`, with the Cloudflare account email
 migration target date of 2026-07-15, per parent identifier
 `OPERATOR-CLOUDFLARE-ADMIN-IDENTITY-DECISION-2026-05-16.md`. The broker's

@@ -13,7 +13,7 @@ priority: high
 
 **STAGED, NOT APPLIED.** This proposal does **not** change
 `policies/host-capability-substrate/tiers.yaml` bytes. That file is
-operator-approved governance (`approved_by: jeffreyverlynjohnson@gmail.com`,
+operator-approved governance (`approved_by: REDACTED-operator-google-account`,
 `approved_at: 2026-05-18T17:10:15Z`), so any byte change requires operator
 sign-off **and** a coordinated HCS snapshot re-vendor to keep the HCS generated
 snapshot byte-identical. This doc hands the operator the exact diff and the