coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0049-T24: record single-provider/host-local limits; route founder scope decision e4c288d9

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 696317@bnt-lap001
Assistant-Session: bab9e511-0915-45b3-926a-2fab552edff6
This commit is contained in:
tegwick 2026-10-23 00:07:30 +02:00
parent e3f1212636
commit 35ce5776bc
2 changed files with 20 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -272,7 +272,7 @@
| task | NK-WP-0049-T21 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T22 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T23 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T24 | todo | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T24 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T25 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T26 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
| task | NK-WP-0049-T27 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |

20
workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md
View file

@ -664,9 +664,12 @@ T26 separately records accepted guide publication.
```task
id: NK-WP-0049-T24
status: todo
status: wait
priority: medium
assignee: codex
needs_human: true
decision_id: "e4c288d9-0b8a-4261-a8bf-0d2a15688615"
blocking_reason: "Limits recorded 2026-10-23; founder chooses accept-with-review-date or intake for G1 second provider, G2 external host-loss detection, G3 recurring drill cadence."
depends_on: [NK-WP-0049-T14]
state_hub_task_id: "474f5a78-a643-59c6-bcf9-fc4a908dfcb0"
```
@ -685,6 +688,21 @@ an external watchdog are not implemented; do not add their grants/jobs implicitl
This task triages the new insights instead of silently expanding NK49's required
implementation to an entire disaster-recovery programme.
2026-10-23: current limits recorded. Gate routed as decision `e4c288d9`.
- **G1, single provider.** The full identity bundle has one encrypted off-host
copy (Storage Share). Scaleway holds database dumps only.
- **G2, host-local health.** The hourly health check and the 25-hour freshness
bound run on railiance01 itself. If that host is lost, nothing reports
staleness.
- **G3, no recurring drill.** The PI database, LLDAP and archive recoveries were
each run once.
Recommendation: accept G1 as a bounded residual risk until 2027-01-31. Open
owner intakes for G2 (off-host watchdog) and G3 (a quarterly isolated restore
that reuses the T16/T31 tooling). Once the founder answers, record each accepted
risk or link each intake, then close this task. No grant, job or watchdog is
added here.
## Deliver and verify the offline retrieval adapter and recovery tools kit
```task