coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(recovery): verify scoped delivery and create first full offsite bundle
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
tegwick 2026-10-16 09:21:55 +02:00
parent 8857d9ff6f
commit 17a8fa1495
15 changed files with 435 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

19
workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md
View file

@ -558,6 +558,23 @@ Fresh capture metadata reports zero helper allow policies. Installed timers are
disabled. No new coding-agent credential or root fallback; partial owner share26
is undistributed. Pending browser status from operator, without duplicate logins.
2026-10-16 first actual full identity backup: provider/reader admission completed.
Both exact native roles have one policy/900-second TTL and deny sibling,
metadata, old escrow and token-create; wrong-SA/namespace/audience negative cases
passed, ESO values matched KV version1 and temporary readers/session were revoked.
Fixed strict ESO comparison to accept only its known no-transformation defaults.
56 focused checks passed, including real synthetic encrypted/native PG recovery.
The disabled runtime was updated through exact previous-unit/source guards.
First full original-key/current-data capture and Storage Share publication plus
fresh downloaded hash readback succeeded: artifact
`net-kingdom-identity-20261016T063159Z-5882771aa2ce.tar.age`,109738344bytes,
SHA256`7117b3fe1e4840c86b301c94c85e6b16709e5626bb0884bd0580bde630e30e30`.
Helper and plaintext cleanup verified. No age private key was used by the agent.
Independent owner retrieval/human-key recovery is next; both timers remain
disabled. Full native service/token/audit/caller and legacy credential
acceptance remain open; T02 progress/T03 wait.
## Verify owner-approved recovery and current native callers
```task
@ -565,7 +582,7 @@ id: NK-WP-0049-T03
status: wait
priority: high
depends_on: [NK-WP-0049-T02]
blocking_reason: "The actual off-host PI database decrypted and restored with the independently held key; wrong-key refusal and cleanup passed. Operator reports no known full identity bundle and requested missing coverage preparation. Full-profile source adapters, bootstrap handoff and discovery are implemented/tested, but CCR-2026-0048/0049 owner admission, first actual full capture/off-site proof and native token/audit/directory/issuer recovery remain open, along with T02 current-owner and legacy-credential disposition. No live bootstrap/root retrieval or deferred exposure rotation is authorized."
blocking_reason: "Both new scoped readers passed native identity and ESO delivery acceptance. The first full identity bundle was captured and Storage Share readback verified with helper/plaintext cleanup. Independent owner download and attended human-key archive recovery remain pending; both timers are disabled. Full directory/issuer/MFA/token/audit continuity plus current caller and T02 legacy credential acceptance remain open. No root fallback or deferred exposure rotation is authorized."
state_hub_task_id: "d68cd4d3-1ba3-530e-88f9-26ebb8dd6eac"
```