Prepare independent outage recovery and Storage Share documentation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2

registry/capabilities/capability.security.bootstrap-recovery.md

@@ -52,7 +52,8 @@ discovery:
     privacyIDEA keys plus linked PostgreSQL dump
   - Public-recipient age sealing, Storage Share create/readback, separate retention
     and attended independent-key archive verification
-  - Railiance bootstrap handoff without requiring recovered SSO for off-host retrieval
+  - Railiance bootstrap handoff and a prepared independent-provider download path
+    requiring neither OpenBao nor SSO; actual outage-path owner drill remains pending
   excludes:
   - Source repairs and disposable native fixtures do not prove estate root isolation
     or recovery
@@ -69,6 +70,11 @@ availability:
   - tools/bootstrap-recovery/identity-backup-profile.json
   - tools/bootstrap-recovery/capture-identity.py
   - tools/bootstrap-recovery/retrieve-identity.py
+  - tools/bootstrap-recovery/retrieve-identity-offline.py
+  - tools/bootstrap-recovery/recovery-kit.py
+  - tools/bootstrap-recovery/run-offline-recovery.sh
+  - docs/disaster-recovery-storage-share.md
+  - docs/identity-service-restore-packet.md
   - tools/bootstrap-recovery/verify-identity.py
   consumption_modes:
   - CLI
@@ -95,6 +101,7 @@ evidence:
   - tests/test_identity_bundle.py
   - tests/test_identity_offsite.py
   - tests/test_identity_backup_preparation.py
+  - tests/test_identity_offline_recovery.py
 consumer_guidance:
   recommended_for:
   - Operator recovers identity, custody or data with independently held recovery material
@@ -140,3 +147,12 @@ Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose;
 ## Identity recovery and bootstrap handoff
 
 Start with [the recovery ceremony](../../docs/bootstrap-recovery-ceremony.md). It names the exact capture, retrieval, hidden-key verification, activation gates and remaining full-service proof. Railiance bootstrap sequences the isolated recovery and layer handoff; NetKingdom owns identity assets and native acceptance. Discovery does not authorize grants or live restore.
+
+For an outage, use [the Storage Share recovery guide](../../docs/disaster-recovery-storage-share.md)
+and the self-contained kit built by `tools/bootstrap-recovery/recovery-kit.py`.
+The private operator handoff publishes the versioned guide/kit with readback,
+retrieves the protected generation using independently held provider access,
+and prompts separately for the human-held age key. Source/fixture preparation
+passed; consult NK-WP-0049-T23/T26 for actual outage drill/publication acceptance.
+The [isolated service packet](../../docs/identity-service-restore-packet.md)
+records the remaining service-owner admission and native tests.