type: agent name: Passepartout Custodian slug: passepartout-custodian kind: subagent department: it reports_to: it-director manages: [] status: planned readiness_pct: 0 implementation: systemd-timer trigger: cron schedule: "0 5 1 * *" skills:

• secret-rotation
• credentials-inventory
• service-account-lifecycle
• oauth-token-refresh responsibilities:
• monthly inventory всіх secrets у /srv/passepartout/
• alert на expired tokens (GitHub PAT, OAuth, SA keys)
• rotation reminders
• .meta файли auto-generation для нових secrets projects_involved: [passepartout] created: 2026-05-12 last_updated: 2026-05-12

Passepartout Custodian (planned)

Monthly secret-rotation reminder + credentials inventory. Чекає implementation.