net-kingdom/docs/evidence/2026-10-15-bootstrap-recovery/readiness.json

{
  "workplan": "NK-WP-0049",
  "observed_at": "2026-10-15T22:08:27.470032+00:00",
  "status": "source_prepared_pending_owner_inputs_and_native_acceptance",
  "backup_destinations_operator_reported": [
    "Scaleway",
    "Storage Share"
  ],
  "exact_offhost_artifact_confirmed": true,
  "independently_held_matching_key_confirmed": false,
  "recovery_key_or_backup_contents_retrieved": true,
  "legacy_token_secret_present": true,
  "legacy_trigger_secret_present": true,
  "legacy_provider_revocation_proven": false,
  "native_recovery_proven": false,
  "deferred_exposure_rotation_reopened": false,
  "caller_inventory": "caller-source-inventory.json",
  "verification": "source-verification.json",
  "ceremony": "../../bootstrap-recovery-ceremony.md",
  "outstanding": [
    "Matching off-host identity data/key/config set remains unlocated in inspected scopes; selected existing PI database ciphertext is now fetched and digest-bound",
    "Operator reports matching-recipient key check passed; actual ciphertext decryption/native database drill is prepared and pending operator hidden-key invocation",
    "Full identity service recovery, token decryption, audit signature continuity and cleanup evidence",
    "T02 current caller/provider source admission and exact legacy provider credential disposition; retain existing deferred-rotation boundary"
  ],
  "operator_reports_holding_railiance_backup_age_key": true,
  "operator_report_recorded_at": "2026-10-15T21:52:22.549430+00:00",
  "key_material_received": false,
  "key_matches_selected_ciphertext_verified": false,
  "offsite_discovery": "offsite-discovery-summary.json",
  "privacyidea_database_ciphertext_identified": true,
  "required_full_asset_coverage_confirmed": false,
  "operator_reports_recipient_check_passed": true,
  "operator_reports_temporary_key_cleanup": true,
  "private_key_received_by_agent": false,
  "ciphertext_fetched": true,
  "transfer_receipt": "privacyidea-transfer-r1.json",
  "prepared_database_drill": "../../bootstrap-recovery-ceremony.md",
  "age_private_key_retrieved_by_agent": false
}