docs(ops): re-anchor today-mode 2026-09-28 and two-week plan

docs/hubs/OPS_HUB.md

@@ -2,13 +2,13 @@
 
 **Português (Brasil):** [OPS_HUB.pt_BR.md](OPS_HUB.pt_BR.md)
 
-<!-- ops-hub-fingerprint: b5d9de19cfcfd9971561ac376514c14c507cc64cce9026ae587aa8b3077b9a78 -->
+<!-- ops-hub-fingerprint: e3d811d9e6013d5eeb78964852b4c235d9411c32d0dc63166e11647ec04fd87a -->
 
 > **For agents:** this page is the **full index** of tracked operator docs under `docs/ops/`.
 > The cold-start ladder is the **session router**; it is not a complete catalogue.
 > Rows are generated from `git ls-files` — do not add files that are not on disk.
 
-_Generated by `scripts/build_ops_hub.py` — **401** Markdown files, **220** stems (EN/pt-BR pairs share a row)._
+_Generated by `scripts/build_ops_hub.py` — **403** Markdown files, **221** stems (EN/pt-BR pairs share a row)._
 
 Canonical prose stays in the linked files. This hub does not move or merge them ([ADR-0057](../adr/ADR-0057-lightweight-hub-index-co-located-links.md)).
 
@@ -296,6 +296,7 @@ Canonical prose stays in the linked files. This hub does not move or merge them
 | OPERATOR_TODAY_MODE_2026-08-28.md | [`OPERATOR_TODAY_MODE_2026-08-28.md`](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-28.md) ([pt-BR](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-28.pt_BR.md)) |
 | OPERATOR_TODAY_MODE_2026-08-30.md | [`OPERATOR_TODAY_MODE_2026-08-30.md`](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-30.md) ([pt-BR](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-30.pt_BR.md)) |
 | OPERATOR_TODAY_MODE_2026-08-31.md | [`OPERATOR_TODAY_MODE_2026-08-31.md`](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-31.md) ([pt-BR](../ops/today-mode/OPERATOR_TODAY_MODE_2026-08-31.pt_BR.md)) |
+| OPERATOR_TODAY_MODE_2026-09-28.md | [`OPERATOR_TODAY_MODE_2026-09-28.md`](../ops/today-mode/OPERATOR_TODAY_MODE_2026-09-28.md) ([pt-BR](../ops/today-mode/OPERATOR_TODAY_MODE_2026-09-28.pt_BR.md)) |
 | OPERATOR_TODAY_MODE_TEMPLATE.md | [`OPERATOR_TODAY_MODE_TEMPLATE.md`](../ops/today-mode/OPERATOR_TODAY_MODE_TEMPLATE.md) ([pt-BR](../ops/today-mode/OPERATOR_TODAY_MODE_TEMPLATE.pt_BR.md)) |
 | PUBLISHED_SYNC.md | [`PUBLISHED_SYNC.md`](../ops/today-mode/PUBLISHED_SYNC.md) ([pt-BR](../ops/today-mode/PUBLISHED_SYNC.pt_BR.md)) |
 | README.md | [`README.md`](../ops/today-mode/README.md) ([pt-BR](../ops/today-mode/README.pt_BR.md)) |

docs/hubs/OPS_HUB.pt_BR.md

@@ -6,6 +6,6 @@
 > O COLD_START_LADDER é o **roteador de sessão**, não o catálogo.
 > As linhas vêm de `git ls-files` — não invente entradas.
 
-_Gerado por `scripts/build_ops_hub.py` — **401** arquivos Markdown, **220** stems (EN e pt-BR na mesma linha). Tabelas canônicas no arquivo em inglês (nomes de arquivo permanecem em inglês para bater com o disco)._
+_Gerado por `scripts/build_ops_hub.py` — **403** arquivos Markdown, **221** stems (EN e pt-BR na mesma linha). Tabelas canônicas no arquivo em inglês (nomes de arquivo permanecem em inglês para bater com o disco)._
 
 Regenerar: `uv run python scripts/build_ops_hub.py --write`.

docs/ops/today-mode/CARRYOVER.md

@@ -12,9 +12,19 @@
 
 | Item | Source | Status | Next step / defer |
 | ---- | ------ | ------ | ----- |
-| **Operator slowdown — token refill ~2026-09-09** | Operator **2026-08-30** EOD | 🔄 Active | Tier A mornings only; no agent marathon; **`feature`/`deps`** defer unless **U0** on `main`. Today: [OPERATOR_TODAY_MODE_2026-08-31.md](OPERATOR_TODAY_MODE_2026-08-31.md). |
-| **#1840 issue queue map — PR #1841** | [#1840](https://github.com/DataBoar/data-boar/issues/1840) · [PR #1841](https://github.com/DataBoar/data-boar/pull/1841) | 🔄 Open PR | Merge when CI green (`Closes #1840`); regen via `scripts/issue_queue_sequencing_map.py`. |
-| **#1709 operator-gated PR guard — PR #1832** | [#1709](https://github.com/DataBoar/data-boar/issues/1709) · [PR #1832](https://github.com/DataBoar/data-boar/pull/1832) | ✅ Merged **2026-08-30** | Operator-only: add **SSHSIG attestation when gated** to ruleset **`main-gate-pii`**. |
+| **Today anchor (re-anchor after gap)** | [OPERATOR_TODAY_MODE_2026-09-28.md](OPERATOR_TODAY_MODE_2026-09-28.md) | 🔄 Active | Two-week cycle **2026-09-28 → 2026-10-11**; PMO table at bottom of today file. |
+| **Maestro RC smoke + sentinel (#91)** | [data-boar#2011](https://github.com/DataBoar/data-boar/pull/2011) · [maestro#91](https://github.com/DataBoar/maestro/issues/91) | ✅ Merged data-boar | Close **maestro#91** with pointer to **#2011**; optional **lab host** RC smoke after podman image restore ([#756](https://github.com/DataBoar/data-boar/issues/756)) (`postgres`, `mariadb`, `oracle-xe`, `mssql`). **Defer** `engine/` uv-sync mirror (maestro private). |
+| **REST / Microsoft env-secret egress (#2006/#2007)** | [data-boar#2012](https://github.com/DataBoar/data-boar/pull/2012) | ✅ Merged **2026-09-28** | Issues **#2006** / **#2007** close via PR. |
+| **License trust anchor (#1992)** | [#1994](https://github.com/DataBoar/data-boar/pull/1994) · comment **5878436617** | ✅ Closed **completed** | Offline revocation = known limitation; short TTL is the control. |
+| **Maestro e2e audit (#82)** | [maestro#82](https://github.com/DataBoar/maestro/issues/82) | 🔄 Partial | **CREDIT_CARD** → Covered (**#1995** / maestro#92 closed). Remaining §B rows + lab evidence **#87**. |
+| **carrion-crow GA neighbor + security lot** | [crow#99](https://github.com/DataBoar/carrion-crow/pull/99) · **#94–#101** | 🔄 Queued | Operator order: **#99** merge first, then security batch. |
+| **1.8.0 GA / BFF hardening** | [data-boar#1980](https://github.com/DataBoar/data-boar/issues/1980) | 🔄 Active | Validate Maestro/KP/Crow path on **`1.8.0-rc`** before stable tag. |
+| **Cursor cloud agent commits + `required_signatures` (#2009)** | [data-boar#2009](https://github.com/DataBoar/data-boar/issues/2009) · PR **#2008** evidence | ⏸️ **Operator decision pending** | Choose: document manual re-sign runbook vs other options in issue body — **not** agent-owned. |
+| **Dependabot queue** | **#1997–#2001** open **2026-09-28** | 🔄 Reopened | Triage **one** PR (`deps` skill); prefer Actions pins before **#2000** / **#2001** majors. |
+| **CRM connector backlog (filing only)** | **#2014–#2018** | ⬜ Backlog | P2 features — not this two-week primary unless operator re-points. |
+| **Operator slowdown — token refill ~2026-09-09** | Operator **2026-08-30** | ✅ Ended | Normal **`feature`** cadence resumed **2026-09-28**. |
+| **#1840 issue queue map — PR #1841** | [#1840](https://github.com/DataBoar/data-boar/issues/1840) | ✅ Done | Map regen: `uv run python scripts/issue_queue_sequencing_map.py --write`. |
+| **#1709 operator-gated PR guard — PR #1832** | [#1709](https://github.com/DataBoar/data-boar/issues/1709) | ✅ Merged **2026-08-30** | Operator-only: add **SSHSIG attestation when gated** to ruleset **`main-gate-pii`**. |
 | **Heptapod / Codeberg give-back (AIIDCOBPP #63)** | [data-boar-shared#63](https://github.com/DataBoar/data-boar-shared/issues/63) | ⬜ Decantar | **No upstream contact** until post **09/09**. Heptapod `projects_limit: 0` — give-back via upstream issues first. |
 | **Milestone hygiene — 3 open without milestone** | [ISSUE_QUEUE_SEQUENCING_MAP.md](../ISSUE_QUEUE_SEQUENCING_MAP.md) **2026-08-30** | ⬜ Optional | `#696`, `#697`, `#1538` — assign via [#1522](https://github.com/DataBoar/data-boar/issues/1522) when energy allows. |
 | **#552 findings sink — PR #1816** | [#552](https://github.com/DataBoar/data-boar/issues/552) · [PR #1816](https://github.com/DataBoar/data-boar/pull/1816) | ✅ Merged | **#552** **CLOSED** — do not manual-close. |

docs/ops/today-mode/CARRYOVER.pt_BR.md

@@ -12,9 +12,18 @@
 
 | Item | Origem | Estado | Próximo passo / defer |
 | ---- | ------ | ------ | ----- |
-| **Desacelerar — refil de token ~2026-09-09** | Operador **2026-08-30** EOD | 🔄 Ativo | Manhãs só Tier A; sem maratona de agente; **`feature`/`deps`** adiados salvo **U0** em `main`. Hoje: [OPERATOR_TODAY_MODE_2026-08-31.pt_BR.md](OPERATOR_TODAY_MODE_2026-08-31.pt_BR.md). |
-| **#1840 mapa da fila — PR #1841** | [#1840](https://github.com/DataBoar/data-boar/issues/1840) · [PR #1841](https://github.com/DataBoar/data-boar/pull/1841) | 🔄 PR aberto | Mergear com CI verde (`Closes #1840`); regen: `scripts/issue_queue_sequencing_map.py`. |
-| **#1709 guard PR operator-gated — PR #1832** | [#1709](https://github.com/DataBoar/data-boar/issues/1709) · [PR #1832](https://github.com/DataBoar/data-boar/pull/1832) | ✅ Mergeado **2026-08-30** | Operador: **SSHSIG attestation when gated** no ruleset **`main-gate-pii`**. |
+| **Âncora today (re-ancoragem)** | [OPERATOR_TODAY_MODE_2026-09-28.pt_BR.md](OPERATOR_TODAY_MODE_2026-09-28.pt_BR.md) | 🔄 Ativo | Ciclo duas semanas **2026-09-28 → 2026-10-11**; PMO no fim do arquivo EN. |
+| **Smoke RC Maestro + sentinel (#91)** | [data-boar#2011](https://github.com/DataBoar/data-boar/pull/2011) · [maestro#91](https://github.com/DataBoar/maestro/issues/91) | ✅ Merge data-boar | Fechar **maestro#91** citando **#2011**; smoke no **host de lab** opcional após imagens podman ([#756](https://github.com/DataBoar/data-boar/issues/756)). **Adiar** espelho `engine/` no maestro. |
+| **Egress env-secret REST / Microsoft (#2006/#2007)** | [data-boar#2012](https://github.com/DataBoar/data-boar/pull/2012) | ✅ Merge **28/set** | Issues fechadas via PR. |
+| **Trust anchor licença (#1992)** | [#1994](https://github.com/DataBoar/data-boar/pull/1994) | ✅ Fechada **completed** | Revogação offline = limitação conhecida. |
+| **Auditoria e2e Maestro (#82)** | [maestro#82](https://github.com/DataBoar/maestro/issues/82) | 🔄 Parcial | **CREDIT_CARD** Covered; restante §B + **#87**. |
+| **GA neighbor + lote segurança crow** | [crow#99](https://github.com/DataBoar/carrion-crow/pull/99) | 🔄 Na fila | **#99** antes de **#94–#101**. |
+| **GA 1.8.0 / BFF** | [data-boar#1980](https://github.com/DataBoar/data-boar/issues/1980) | 🔄 Ativo | Validar Maestro/KP/Crow em **`1.8.0-rc`**. |
+| **Commits do agente Cursor + `required_signatures` (#2009)** | [data-boar#2009](https://github.com/DataBoar/data-boar/issues/2009) · evidência **#2008** | ⏸️ **Decisão pendente do operador** | Escolher opções do corpo da issue (ex.: runbook de re-assinatura manual) — **não** é decisão do agente. |
+| **Fila Dependabot** | **#1997–#2001** | 🔄 Aberta | Um PR por vez (`deps`). |
+| **Desacelerar ~2026-09-09** | Operador **2026-08-30** | ✅ Encerrado | Cadência normal desde **28/set**. |
+| **#1840 mapa — PR #1841** | [#1840](https://github.com/DataBoar/data-boar/issues/1840) | ✅ Feito | Regen: `scripts/issue_queue_sequencing_map.py --write`. |
+| **#1709 guard PR operator-gated — PR #1832** | [#1709](https://github.com/DataBoar/data-boar/issues/1709) | ✅ Mergeado **2026-08-30** | Operador: **SSHSIG attestation when gated** no ruleset **`main-gate-pii`**. |
 | **Give-back Heptapod / Codeberg (AIIDCOBPP #63)** | [data-boar-shared#63](https://github.com/DataBoar/data-boar-shared/issues/63) | ⬜ Decantar | **Sem contato upstream** até após **09/09**. Heptapod `projects_limit: 0`. |
 | **Hygiene milestone — 3 abertas sem milestone** | [ISSUE_QUEUE_SEQUENCING_MAP.md](../ISSUE_QUEUE_SEQUENCING_MAP.md) **2026-08-30** | ⬜ Opcional | `#696`, `#697`, `#1538` — [#1522](https://github.com/DataBoar/data-boar/issues/1522). |
 | **#552 sink de achados — PR #1816** | [#552](https://github.com/DataBoar/data-boar/issues/552) · [PR #1816](https://github.com/DataBoar/data-boar/pull/1816) | ✅ Mergeado | **#552** **CLOSED** — não fechar manualmente. |

docs/ops/today-mode/OPERATOR_TODAY_MODE_2026-09-28.md

@@ -0,0 +1,98 @@
+# Operator today mode — 2026-09-28 (re-anchor: RC + security landed, GA path)
+
+**Português (Brasil):** [OPERATOR_TODAY_MODE_2026-09-28.pt_BR.md](OPERATOR_TODAY_MODE_2026-09-28.pt_BR.md)
+
+**Headline:** **`main`** absorbed a heavy **BFF / RC / security** day: **[#2011](https://github.com/DataBoar/data-boar/pull/2011)** (Maestro RC smoke + sentinel extras, closes data-boar side of maestro#91) and **[#2012](https://github.com/DataBoar/data-boar/pull/2012)** (**#2006** REST `pass_from_env` gate, **#2007** Microsoft token URL allowlist). **[#1992](https://github.com/DataBoar/data-boar/issues/1992)** closed **completed** (trust anchor / #1994). Maestro: **#92** closed; **#82** CREDIT_CARD → **Covered**. **Next:** close the loop on **maestro#91** (issue still open), **lab host smoke** (podman images; [#756](https://github.com/DataBoar/data-boar/issues/756)), **carrion-crow** queue (**#99** then security lot), **1.8.0 GA** thread **[#1980](https://github.com/DataBoar/data-boar/issues/1980)**.
+
+**Workstation clock:** `2026-09-28` (Sunday) · confirm with `date` on the dev workstation.
+
+**Two-week plan (this cycle):** [PLAN_TWO_WEEK_EXECUTION_NO_REGRESSION.md](../../plans/PLAN_TWO_WEEK_EXECUTION_NO_REGRESSION.md) — **2026-09-28 → 2026-10-11**
+
+**Token posture:** Normal execution; full **`./scripts/check-all.sh`** before any publish/merge.
+
+---
+
+## Block 0 — Morning reality (Tier A, ~10 min)
+
+Run **`carryover-sweep`** or **`./scripts/operator-day-ritual.ps1 -Mode Morning`**.
+
+1. **`git fetch`** + **`git checkout main`** + **`git pull origin main`** (tip at write: merge **#2012** → `f9d36617`)
+2. **`gh pr list -R DataBoar/data-boar`** — product PRs clear; open queue is mostly **Dependabot** (**#1997–#2001**)
+3. **`gh pr list -R DataBoar/maestro`** / **`carrion-crow`** — **[crow #99](https://github.com/DataBoar/carrion-crow/pull/99)** still the GA-neighbor epic gate per operator queue
+4. Sync sibling clones: **`../maestro`**, **`../carrion-crow`** on `main` after pulls
+5. - [ ] **Social skim** (~2 min): `docs/private/social_drafts/editorial/SOCIAL_HUB.md`
+
+**Not default today:** blind-merge Dependabot majors; new CRM connector implementation (**#2014–#2018** are backlog filing, not sprint scope).
+
+---
+
+## Wins already on `main` (do not re-litigate)
+
+| Item | State |
+| ---- | ----- |
+| **#2011** — RC `uv sync` extras + `missing_optional_dependency` sentinel | ✅ Merged **2026-09-28** |
+| **#2012** — REST env-secret egress + Microsoft `login.microsoftonline.com` token URL | ✅ Merged **2026-09-28** |
+| **#1995** — `filesystem_credit_card` sentinel + Luhn fixture | ✅ Merged (earlier) |
+| **#1994** — license cross-sign / no raw key override | ✅ Merged; **#1992** closed |
+| **maestro#92** — CREDIT_CARD e2e assertion | ✅ Closed (code via #1995; #82 comment) |
+| **Slowdown / Ultra refill ~2026-09-09** | ✅ **Expired** — resume normal **`feature`** cadence |
+
+---
+
+## If you have one focused block (pick **one** primary)
+
+| Priority | Slice | Repo | Notes |
+| -------- | ----- | ---- | ----- |
+| **P1** | Close **maestro#91** with evidence | maestro | Fix is on data-boar **#2011**; optional **lab host** smoke after podman image restore ([#756](https://github.com/DataBoar/data-boar/issues/756)) |
+| **P2** | **carrion-crow #99** → merge | carrion-crow | Operator queue: before security lot **#94–#101** |
+| **P3** | **maestro#82** gap closure | maestro + data-boar | CREDIT_CARD done; Mongo/smoke path + remaining §B rows |
+| **P4** | Dependabot **one** PR | data-boar | Prefer **#1999** / **#1998** (Actions pins); skill **`deps`** |
+| **Defer** | `engine/` mirror of RC `uv sync` | maestro | Explicitly deferred post-#2011 |
+| **Defer** | CRM connectors **#2014–#2018** | data-boar | P2 backlog — no implementation this cycle unless operator re-points |
+
+---
+
+## Carryover — today rows
+
+- [ ] **`git pull`** on **data-boar**, **maestro**, **carrion-crow** `main`
+- [ ] **maestro#91:** comment + close referencing **data-boar#2011** (or run lab host smoke first if operator wants lab proof)
+- [ ] **Lab host:** restore podman smoke images before RC host-smoke (`postgres`, `mariadb`, `oracle-xe`, `mssql`) — [#756](https://github.com/DataBoar/data-boar/issues/756)
+- [ ] **carrion-crow:** land **#99**, then security batch per operator order
+- [ ] Refresh [ISSUE_QUEUE_SEQUENCING_MAP.md](../ISSUE_QUEUE_SEQUENCING_MAP.md) if milestone mix shifted (`uv run python scripts/issue_queue_sequencing_map.py --write`)
+- [ ] **`eod-sync`** if you merged or moved issues today
+
+---
+
+## End of day
+
+- **`block-close`** / **`eod-sync`** when leaving a work block
+- Skim **`OPERATOR_TODAY_MODE_2026-09-29.md`** tomorrow or carry one line in [CARRYOVER.md](CARRYOVER.md)
+
+---
+
+## Quick refs
+
+- [CARRYOVER.md](CARRYOVER.md) · [WORKBOARD.md](WORKBOARD.md) · [PLANS_TODO.md](../../plans/PLANS_TODO.md) · [ISSUE_QUEUE_SEQUENCING_MAP.md](../ISSUE_QUEUE_SEQUENCING_MAP.md)
+- Session: **`today-mode`**, **`carryover-sweep`**, **`pmo-view`**, **`feature`**, **`deps`**, **`eod-sync`**
+
+---
+
+## PMO view (2026-09-28)
+
+| Lane | Now | Next | Blocker |
+| ---- | --- | ---- | ------- |
+| **data-boar `main`** | **1.8.0-rc** working line; **#2011/#2012** merged | **1.8.0 GA** narrative **[#1980](https://github.com/DataBoar/data-boar/issues/1980)**; **#1984** Amex/Diners docs | Lab proof + Maestro e2e **#82** |
+| **Maestro** | **#92** closed; **#82** partial | Close **#91**; **#87** evidence; engine mirror deferred | Lab podman images; **#99** crow gate |
+| **carrion-crow** | **#99** open (GA neighbor M1) | **#94–#101** security lot after **#99** | Operator sequencing |
+| **Supply chain** | 5 Dependabot PRs open | Triage **one** Actions pin PR | No blind major bumps |
+| **Published** | **1.7.4.post12** / Hub | Next horizon **1.8.0** stable | GA checklist + BFF validation |
+
+**Milestones (GitHub SoT):** refresh [ISSUE_QUEUE_SEQUENCING_MAP.md](../ISSUE_QUEUE_SEQUENCING_MAP.md) — do not schedule **v1.8.1** work as **v1.8.0** in prose.
+
+**Plans mirror:** [PLANS_TODO.md](../../plans/PLANS_TODO.md) active threads — RC sentinel **#1985**, CREDIT_CARD **#1984**, engineering doctrine manifestos, **S2a** transport/trust.
+
+**Risk register (short):**
+
+1. **E2e drift** — maestro#82 still open while product moved fast on RC/security.
+2. **Lab fidelity** — smoke truth requires lab podman stack + optional Maestro harness run.
+3. **PR fan-out** — Dependabot + new CRM issues **#2014–#2018** add noise; keep **one slice / one PR** discipline.