key-cape/history
tegwick f12d24e079 Name the baseline the reassessment actually covers
The header cited 5ae80d3, but 7a73352 landed 58 seconds earlier, so a reader
applying the convention would ask what changed since 5ae80d3, find that commit
and be unable to tell its substance was already accounted for. Honest about what
was read and misleading about what is covered, which is the failure the
convention exists to prevent.

7a73352 changes documentation and workplans only, no source, and its substance
reached this document as a peer report before being confirmed by reading the
commit. The baseline now names it and records that distinction rather than
smoothing it over: read and told are different, which is the same distinction the
third state draws and the one behind four corrections this week.

Also records why the unreleased fail-closed changes stay a pointer to
docs/operations.md rather than being restated here. That section is built from a
deployed digest, a config resource version and a dated re-check note -- facts
with a short shelf life. SCOPE is a durable claims document, and putting
perishable facts in a durable one is how it drifted 63 commits to begin with.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NV9oijZukGyGbRQGGKnK4P

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 713576@bnt-lap001
Assistant-Session: 384c511d-9bce-4cb8-a676-2aef6c0c8df6
2026-09-09 20:11:56 +02:00
..
2026-09-05-011726-scope-intent-assessment.md Establish the live state and find a rollout precondition for G10 2026-09-08 11:41:42 +02:00
2026-09-09-scope-reassessment.md Name the baseline the reassessment actually covers 2026-09-09 20:11:56 +02:00
KEY-WP-0011-live-secret-exposure-recovery.md ops: restart identity provisioner during keycape rotation 2026-08-23 14:42:44 +02:00
KEY-WP-0011-rotated-credentials-2026-08-23-final.tar.age security: rotate exposed KeyCape credentials 2026-08-23 14:26:36 +02:00