NK-WP-0053 finished: G1 decided (Scaleway second-provider intake, e8935fa6)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56

WORK-RECORDS.md

@@ -50,7 +50,7 @@
 | workplan | NK-WP-0050 | blocked | — | workplans/NK-WP-0050-playwright-consumer-registration.md |
 | workplan | NK-WP-0051 | finished | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
 | workplan | NK-WP-0052 | finished | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
-| workplan | NK-WP-0053 | active | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
+| workplan | NK-WP-0053 | finished | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
 | workplan | NK-WP-0054 | active | — | workplans/NK-WP-0054-service-identity-policy.md |
 | workplan | NK-WP-0055 | active | — | workplans/NK-WP-0055-security-platform-production-readiness.md |
 | task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md |
@@ -308,7 +308,7 @@
 | task | NK-WP-0052-T01 | done | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
 | task | NK-WP-0053-T01 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
 | task | NK-WP-0053-T02 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
-| task | NK-WP-0053-T03 | wait | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
+| task | NK-WP-0053-T03 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
 | task | NK-WP-0053-T04 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md |
 | task | NK-WP-0054-T01 | done | — | workplans/NK-WP-0054-service-identity-policy.md |
 | task | NK-WP-0054-T02 | done | — | workplans/NK-WP-0054-service-identity-policy.md |

workplans/NK-WP-0053-identity-restore-drill-cadence.md

@@ -4,12 +4,12 @@ type: workplan
 title: "Quarterly isolated identity restore drill"
 domain: infotech
 repo: net-kingdom
-status: active
+status: finished
 flavor: implementation
 owner: claude
 topic_slug: netkingdom
 created: "2026-10-23"
-updated: "2026-10-28"
+updated: "2026-10-30"
 related:
   - NK-WP-0049
   - disaster-control/BackupPolicy.md
@@ -18,6 +18,9 @@ state_hub_workstream_id: "7c80ba09-8bd5-540e-8dd3-feb85e201ef3"
 
 # NK-WP-0053 — Quarterly isolated identity restore drill
 
+> **Finished 2026-10-30.** Drill passed 2026-10-29 (next due 2027-01-29, held in disaster-control's
+> restore-proof register); G1 decided (`e8935fa6`, Scaleway intake under NK-WP-0055-T07).
+>
 > **2026-10-28** (founder triage): T02, T04 and T03 are finished now, not at the 2027-01-31
 > deadline. One attended `admin` run covers T02 and T04; T03 follows from its results. The
 > workplan then closes. The quarterly repeat lives in disaster-control's restore-proof register
@@ -124,10 +127,17 @@ post-2026-10-25 generation.
 
 ```task
 id: NK-WP-0053-T03
-status: wait
+status: done
 priority: low
-blocking_reason: "Founder review right after the T02 run, using its results: renew the single-provider acceptance or open a second-provider intake. Not deferred to the 2027-01-31 deadline."
+decision_id: "e8935fa6-ada8-4d15-bef2-4deb9671502a"
 state_hub_task_id: "0fa4add7-3d53-51af-a2a2-ea9c63a2d628"
 ```
 
 Use the drill results to put the single-provider question back to the founder.
+
+**Done 2026-10-30, founder decision `e8935fa6`:** open a second-provider intake. railiance-platform adds the
+backup profile's planned Scaleway secondary for the full identity bundle (`application-archives/net-kingdom/`,
+own scoped credential, readback proof). The G1 acceptance continues until 2027-01-31 or until the second copy
+is proven, whichever is first. Basis: the drill passed, but the single 10 GiB Storage Share account filled and
+no generation was written 2026-10-20..29 without alert (NK-WP-0055-T07). Quota, CNPG remote retention and the
+G2 alert remain required. The intake is tracked in NK-WP-0055-T07.

workplans/NK-WP-0055-security-platform-production-readiness.md

@@ -240,6 +240,11 @@ folder. Follow-ups routed to owners: railiance-platform (CNPG remote retention,
 secondary, confirm a verified full Forgejo archive on Scaleway, quota), disaster-control (alert on backup
 refusal). Next: a fresh generation, then drill stages 1 and 5 on it.
 
+2026-10-29/30: fresh generation `20261029T230600Z` captured after space was freed; the NK-WP-0053 drill
+passed on it (next due 2027-01-29). G1 decision `e8935fa6`: second-provider intake to railiance-platform for
+a Scaleway secondary of the full identity bundle; this task tracks it, with the Backup quota, CNPG remote
+retention and the refusal/staleness alert.
+
 ## Decide durable custody for receipts kept outside Git
 
 ```task