From c79d53c8e0ad76064d45f2c271b9a350dcdfd921 Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 8 Oct 2026 23:13:17 +0200 Subject: [PATCH] Record the empty backup-primary slots waiting for founder key versions. Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54 --- workplans/EMAIL-WP-0007-ledger-backup-recovery.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md index d6fc119..9fc75a6 100644 --- a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md +++ b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md @@ -127,9 +127,9 @@ monitoring stay waiting. CSOC-WP-0015-T03 is the product acceptance follow-up. ## Pair-custody preview — 2026-10-08 Founder admitted `backup-pair-writer` on 2026-10-08. The OpenBao policy is -installed and matches its source file. Both backup-primary KV paths are still -absent: the bootstrap key cannot create IAM applications (403), and the live -bucket policy still allows only the existing resource-control application -under `platform-pg/*`. No Scaleway key, primary.env, receiver pause, upload -or timer. T03/T04 stay wait. Review: +installed and matches its source file. Version 1 of both backup-primary KV paths now exists, with both field names +set to a non-credential placeholder. The founder will enter the real pairs +as a new OpenBao UI version. The live bucket policy still allows only the +existing resource-control application under `platform-pg/*`. No real Scaleway +key, primary.env, receiver pause, upload or timer. T03/T04 stay wait. Review: railiance-platform/docs/credential-lane-designs/application-backup-pair-custody-2026-10-08.md.