coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record custody share diagnosis and owned repair blockers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
tegwick 2026-10-03 21:49:24 +02:00
parent fae95f248e
commit 742b8a24e5
3 changed files with 73 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

31
docs/evidence/2026-10-03-root-custody-share-inspection.json Normal file
View file

@ -0,0 +1,31 @@
{
"backup_roundtrip_proved": false,
"current_live_baseline_matches": true,
"current_route_classification": "authentication_rejected",
"current_route_http_status": 401,
"current_token_found_in_reviewed_folder": false,
"current_token_unique": false,
"digest": "33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248",
"documented_route_classification": "authentication_rejected",
"documented_route_http_status": 401,
"documented_route_no_basic_classification": "other_status",
"documented_route_no_basic_http_status": 503,
"finished_at": "2026-10-03T19:36:10.731742+00:00",
"historical_config_present": true,
"historical_credential_status": "historical-owner-and-revocation-unverified",
"historical_share_matches_current_lane": false,
"kv_version": 1,
"labelled_share_present": false,
"labelled_share_unique": false,
"lane_kv_version": 3,
"ok": true,
"provider_mutations_performed": false,
"public_route_probes_skipped": false,
"read_only_diagnostic": true,
"record_id": "nk-custody:platform-root",
"recorded_at": "2026-10-03T19:36:07.682938+00:00",
"revision": 1,
"scope": "read-only-current-governed-share-inspection",
"stage": "complete",
"status": "diagnostic-complete"
}

22
docs/evidence/2026-10-03-root-grant-delivery-progress.md
View file

@ -278,3 +278,25 @@ protected/expired shares skip public authentication probes. Twenty-five finish
tests pass. Exact expected/derived remote projection applied, working tree clean.
Inspection still requires the founder's own attended credential route;
no provider conclusion or actual backup success is inferred from source tests.
## Successful share inspection; recovery remains blocked
The attended read-only receipt at 19:36 UTC is retained in
`2026-10-03-root-custody-share-inspection.json`. The baseline matches live KV1;
backup lane KV3 has neither its token nor the expected labelled share in the
reviewed owner folder inventory. Both authenticated route probes returned 401;
the unauthenticated documented route returned 503. No provider mutation or
encrypted-history roundtrip was performed. Inventory absence is scoped to that
folder; these results do not prove global deletion or successful recovery.
The platform owner is preparing a tested attended repair that proves replacement
share upload/download/decryption before CAS of only the lane's upload coordinates,
preserving all other fields, keys, backups and unknown shares. Activity-core owns
the subsequent consumer refresh: worker environment snapshots and the frozen
Forgejo backup ConfigMap require explicit loaded-client evidence.
Security orientation reloaded after compaction: package 0.2.4, digest
`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`,
start card withheld/orientation-only because a source changed. Reviewed the local
start card and operative NetKingdom SECURITY-COMPANION directly; this retrieval
does not grant authority or establish live readiness.