NK-WP-0053-T01: done; disaster-control adopted the identity lane (DISCTL-WP-0004)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 696317@bnt-lap001
Assistant-Session: bab9e511-0915-45b3-926a-2fab552edff6
This commit is contained in:
tegwick 2026-10-23 06:59:24 +02:00
parent 4f616cfff8
commit 33bf19f2ba
2 changed files with 14 additions and 3 deletions

View file

@ -300,7 +300,7 @@
| task | NK-WP-0051-T05 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
| task | NK-WP-0051-T06 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
| task | NK-WP-0052-T01 | done | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
| task | NK-WP-0053-T01 | wait | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
| task | NK-WP-0053-T01 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
| task | NK-WP-0053-T02 | wait | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
| task | NK-WP-0053-T03 | wait | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |

View file

@ -13,6 +13,7 @@ updated: "2026-10-23"
related:
- NK-WP-0049
- disaster-control/BackupPolicy.md
state_hub_workstream_id: "7c80ba09-8bd5-540e-8dd3-feb85e201ef3"
---
# NK-WP-0053 — Quarterly isolated identity restore drill
@ -32,9 +33,9 @@ grant, scheduler or production effect; each live drill is an attended owner run.
```task
id: NK-WP-0053-T01
status: wait
blocking_reason: "Drill document written 2026-10-23 (docs/identity-restore-drill.md); waiting for disaster-control to record the identity lane (message ef2bf2a9)."
status: done
priority: medium
state_hub_task_id: "6bdfac30-75a8-5a1a-8d66-2fbb0c093958"
```
Write `docs/identity-restore-drill.md`: a quarterly cadence aligned with
@ -47,6 +48,14 @@ Ask disaster-control to add the identity lane to its restore-proof register.
**Done when:** the drill document is reviewed and disaster-control records the
identity lane with a quarterly restore-proof schedule.
2026-10-23: done. The drill procedure is `docs/identity-restore-drill.md`.
disaster-control adopted the lane as DISCTL-WP-0004 (commits 9ca7419 and
a54ff81). Changes there: AssetRegister `backup-netkingdom-identity`, three
DataRegister classes, BackupPolicy checks M-7 (25-hour freshness) and M-8
(quarterly drill), G1/G2 in its open-gaps table until 2027-01-31, and an
RTO/RPO matrix row. RTO stays TBD until the first drill. When the first drill
evidence lands, tell disaster-control (its DISCTL-WP-0004-T03 is waiting on it).
## Run the first scheduled drill
```task
@ -55,6 +64,7 @@ status: wait
priority: medium
depends_on: [NK-WP-0053-T01]
blocking_reason: "Attended owner run; the operator holds the backup age key. Due by 2027-01-31, the end of the G1 risk-acceptance window."
state_hub_task_id: "8b2cdf5a-69e1-59c6-8e4e-e478f44f77fb"
```
Run the drill in an attended session and retain the value-safe receipts. Any
@ -71,6 +81,7 @@ id: NK-WP-0053-T03
status: wait
priority: low
blocking_reason: "Founder review due 2027-01-31: renew the single-provider acceptance or open a second-provider intake."
state_hub_task_id: "0fa4add7-3d53-51af-a2a2-ea9c63a2d628"
```
Use the drill results to put the single-provider question back to the founder.