coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept live empty custody integration and isolated recovery evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
tegwick 2026-10-03 20:35:46 +02:00
parent a1209ce7aa
commit 36f2afcb38
7 changed files with 146 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/contracts/root-grant-read-contract_v0.1.md
View file

@ -5,9 +5,11 @@ Tracks NK-WP-0045 and accepted [ADR-0017](../adr/ADR-0017-root-grant-custody-and
Schema: [custody-record v0.1](../../canon/schemas/custody-record_v0.1.schema.json).
Reference implementation and fixtures: [validator](../../tools/custody-record/README.md).
The founder accepted ADR-0017 and selected the OpenBao design below. Delivery
and identity admission are pending; design acceptance does not assign a
custodian or establish a real root grant. Fixtures are
The founder accepted ADR-0017 and selected the OpenBao design below. Attended
reader admission, empty-record publication and live consumer integration are
verified in the [delivery evidence](../evidence/2026-10-03-root-grant-delivery-progress.md).
Independent producer recovery closure remains pending. No custodian has been
assigned and no real root grant established. Fixtures are
synthetic and must never seed the authoritative record.
## Read-surface decision (T04)
@ -33,8 +35,10 @@ has no default policy and only the exact document read. The flex-auth JWT and
ESO credentials are separate and cannot substitute for this admission.
The founder subsequently approved going forward with implementation and the
approved delivery design. Actual admission, attended custody publication,
bootstrap provenance and live acceptance remain owner execution requirements.
approved delivery design. Actual admission and attended empty custody publication
succeeded, and controlled bootstrap/live empty-source acceptance succeeded.
Independent retained-history backup and producer recovery/audit evidence remain
owner execution requirements.
The producer packet is `railiance-platform/openbao/root-grant/README.md`.
user-engine retains its source/revision baseline atomically in its existing