From 656c35fc7b9c52950219c75a3f4ef1817ad52dfa Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 27 Oct 2026 22:19:47 +0100 Subject: [PATCH] NK-WP-0055-T10: record founder answers on unseal, share custody and HA Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 4515@bnt-lap001 Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354 --- workplans/NK-WP-0055-security-platform-production-readiness.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/workplans/NK-WP-0055-security-platform-production-readiness.md b/workplans/NK-WP-0055-security-platform-production-readiness.md index 6a21535..4b515d0 100644 --- a/workplans/NK-WP-0055-security-platform-production-readiness.md +++ b/workplans/NK-WP-0055-security-platform-production-readiness.md @@ -247,6 +247,8 @@ Decide what production requires: **Done when:** each answer is recorded as a hub decision and reflected in the ledger. + +2026-10-27 founder answers: (a) manual Shamir unseal is the approved mechanism for now; (c) the founder, as platform-root, holds the OpenBao unseal shares (single holder; two-of-three escrow holders not named); (d) HA stays out of scope for now. (b) Topaz is pending an explanation of the accepted-exception consequences. ## Get every audit source into the durable sink with one correlation id ```task