Mark FI-WP-0004-T08 done: Scaleway reserve bucket is live

90-day Glacier lifecycle (Scaleway minimum). Smoke PUT/GET recorded.
V4-Flash collect remains T09.

Assistant: grok
Assistant-Session: 01a09c6a-1cfc-75b1-a78d-c13eaf22241d

workplans/FI-WP-0004-operational-loop-and-scaleway-reserve.md

@@ -188,16 +188,25 @@ script is documented. Bucket create itself is T08 (operator).
 
 ```task
 id: FI-WP-0004-T08
-status: todo
+status: done
 priority: high
 state_hub_task_id: "a824a9a1-9cb2-5fbc-9428-708f98392ad6"
 ```
 
+**2026-09-13:** Bucket `railiance-fi-open-weight-reserve` exists in `nl-ams`,
+versioning on, no object expiry, `strategic/` → Glacier at 90 days
+(provider minimum). STANDARD PUT/GET smoked; Glacier PUT smoked
+(GET needs restore). YAML `status: active`. Residual: bucket-scoped IAM
+key — bootstrap cannot `iam application list`; collect loads bootstrap
+from OpenBao at runtime until a founder key is stored at
+`platform/workloads/railiance/freedom-intelligence/object-storage`.
+
 Operator / railiance-platform:
 
 1. Create private bucket `railiance-fi-open-weight-reserve` in `nl-ams`.
 2. Versioning on. **No 30-day object expiry.**
-3. Lifecycle: prefix `strategic/` → Glacier after 1 day.
+3. Lifecycle: prefix `strategic/` → Glacier after 90 days (Scaleway minimum).
+   S-tier PUT still uses `StorageClass=GLACIER` immediately.
 4. Scoped IAM key in OpenBao (not the postgres backup key).
 5. Flip the reef-storage YAML to `status: active`.
 6. Confirm a 1-byte PUT/GET.
@@ -227,7 +236,7 @@ After T08: pull `deepseek-ai/DeepSeek-V4-Flash-0731` via
 - [x] Durability verifier exists
 - [x] Executor publishes to origin or fails the day
 - [x] V4-Flash cataloged at the real size
-- [ ] Bucket live (T08, operator)
+- [x] Bucket live (T08)
 - [ ] First S-tier object on Scaleway (T09)
 
 ## Out of scope