From 28bb13d7d6d39dd4fe95012518cd93fabaa71b0d Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 9 Oct 2026 00:05:35 +0200 Subject: [PATCH] Record email-connect backup pair delivery. The accepted reader wrote primary.env. Retention, escrow, capture and the timer remain open. Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54 --- workplans/EMAIL-WP-0007-ledger-backup-recovery.md | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md index 82bff71..7849daf 100644 --- a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md +++ b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md @@ -60,10 +60,10 @@ challenges before releasing traffic. Never auto-restore into a running service. ```task id: EMAIL-WP-0007-T03 -status: wait +status: progress priority: high needs_human: true -intervention_note: "Platform must admit the separate email-connect archive prefix, caller delivery, retention/capacity, independently retained receipts and recovery escrow; shared uploader support alone is not custody admission." +intervention_note: "The email-connect reader is accepted and primary.env is delivered. Retention, capacity, independent receipt custody and recovery escrow remain open." state_hub_task_id: "680fe4d6-12af-5296-acf9-15c9a01a0db3" ``` @@ -133,3 +133,12 @@ gone. The bucket policy now also names the email-connect publisher, limited to A prefix proof aborted its own upload and denied the other prefixes. No primary.env, receiver pause, upload or timer. T03/T04 stay wait. Review: railiance-platform/docs/credential-lane-designs/application-backup-pair-custody-2026-10-08.md. + +## Reader delivery — 2026-10-08 + +Founder acceptance recorded on CCR-2026-0036 and CCR-2026-0037. Both reader +policies and Kubernetes roles are installed. email-connect +`/etc/email-connect-backup/primary.env` is root:root mode 0600 in a mode 0700 +directory, KV version 2, token revoked before publication, readback equal. +Coulomb's reader is applied and its node file was not created. No receiver +pause, upload, escrow, retention decision or timer. T04 stays wait.