From 1eded6a356a2d46921d3e25936df5256ad1700ca Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 23 Oct 2026 09:10:02 +0200 Subject: [PATCH] NK-WP-0049-T33: LE staging rehearsal green; only the anchor install remains Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 4101@bnt-lap001 Assistant-Session: bc7d2ce5-6f32-45f1-83e5-0dcbb8e610a7 --- .../NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md b/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md index 2e44edd..e1f9998 100644 --- a/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md +++ b/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md @@ -1027,7 +1027,7 @@ status: wait priority: high assignee: codex depends_on: [NK-WP-0049-T32, NK-WP-0049-T34, NK-WP-0049-T35, NK-WP-0049-T36, NK-WP-0049-T39] -blocking_reason: "Packet complete in source 2026-10-23 (ceremony steps 1-5: admission, selector preflight, ACME reissue TLS, launcher, verify-keycape-attempt-receipt.py + retained location; deadline = signed admission window). Waiting only on: attempt-host admission anchor install (SECRETS-WP-0015-T04, founder/root-owned) and the attended LE staging rehearsal run (prepared in railiance-cluster RCLUSTER-WP-0018-T06, a7c0e5b: docs/keycape-tls-le-staging-rehearsal.md)." +blocking_reason: "Packet complete in source 2026-10-23 (ceremony steps 1-5: admission, selector preflight, ACME reissue TLS, launcher, verify-keycape-attempt-receipt.py + retained location; deadline = signed admission window). LE staging rehearsal run green 2026-10-23 (railiance-cluster aad0e70, receipt in docs/keycape-tls-le-staging-rehearsal.md). Waiting only on: attempt-host admission anchor install (SECRETS-WP-0015-T04, founder/root-owned)." state_hub_task_id: "56c8d469-7a10-5d50-a30e-95cbf3cd4756" ``` @@ -1066,6 +1066,13 @@ consumer/MFA over-claims and secret-shaped content. Two external prerequisites remain: the anchor install (SECRETS-WP-0015-T04) and the staging rehearsal (railiance-cluster). +2026-10-23: the Let's Encrypt staging rehearsal was run attended by the founder and +was green. The Certificate was Ready on the first order. The issuer was `(STAGING) Ersatz Emmer +YR2`, the SAN was exactly kc.coulomb.social, and the chain verified OK. The live +fingerprint `D5:DB:2B:55…` and the `sso/kc-tls` resourceVersion 66444692 were unchanged, +and cleanup was done. The receipt is in railiance-cluster aad0e70. Only the anchor install +(SECRETS-WP-0015-T04) remains before the attended attempt. + ## Deliver attended custody, metadata preflight and private manifest preparation source ```task