From 81292e2231dddcbd0baaa61264d5bb963d6f9272 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 30 Oct 2026 00:17:11 +0100 Subject: [PATCH] NK-WP-0053 finished: G1 decided (Scaleway second-provider intake, e8935fa6) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 308701@bnt-lap001 Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56 --- WORK-RECORDS.md | 4 ++-- ...K-WP-0053-identity-restore-drill-cadence.md | 18 ++++++++++++++---- ...5-security-platform-production-readiness.md | 5 +++++ 3 files changed, 21 insertions(+), 6 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index f8a7b50..19985ae 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -50,7 +50,7 @@ | workplan | NK-WP-0050 | blocked | — | workplans/NK-WP-0050-playwright-consumer-registration.md | | workplan | NK-WP-0051 | finished | — | workplans/NK-WP-0051-sign-in-diagnosis.md | | workplan | NK-WP-0052 | finished | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md | -| workplan | NK-WP-0053 | active | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | +| workplan | NK-WP-0053 | finished | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | | workplan | NK-WP-0054 | active | — | workplans/NK-WP-0054-service-identity-policy.md | | workplan | NK-WP-0055 | active | — | workplans/NK-WP-0055-security-platform-production-readiness.md | | task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | @@ -308,7 +308,7 @@ | task | NK-WP-0052-T01 | done | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md | | task | NK-WP-0053-T01 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | | task | NK-WP-0053-T02 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | -| task | NK-WP-0053-T03 | wait | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | +| task | NK-WP-0053-T03 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | | task | NK-WP-0053-T04 | done | — | workplans/NK-WP-0053-identity-restore-drill-cadence.md | | task | NK-WP-0054-T01 | done | — | workplans/NK-WP-0054-service-identity-policy.md | | task | NK-WP-0054-T02 | done | — | workplans/NK-WP-0054-service-identity-policy.md | diff --git a/workplans/NK-WP-0053-identity-restore-drill-cadence.md b/workplans/NK-WP-0053-identity-restore-drill-cadence.md index bbf564a..8c13b87 100644 --- a/workplans/NK-WP-0053-identity-restore-drill-cadence.md +++ b/workplans/NK-WP-0053-identity-restore-drill-cadence.md @@ -4,12 +4,12 @@ type: workplan title: "Quarterly isolated identity restore drill" domain: infotech repo: net-kingdom -status: active +status: finished flavor: implementation owner: claude topic_slug: netkingdom created: "2026-10-23" -updated: "2026-10-28" +updated: "2026-10-30" related: - NK-WP-0049 - disaster-control/BackupPolicy.md @@ -18,6 +18,9 @@ state_hub_workstream_id: "7c80ba09-8bd5-540e-8dd3-feb85e201ef3" # NK-WP-0053 — Quarterly isolated identity restore drill +> **Finished 2026-10-30.** Drill passed 2026-10-29 (next due 2027-01-29, held in disaster-control's +> restore-proof register); G1 decided (`e8935fa6`, Scaleway intake under NK-WP-0055-T07). +> > **2026-10-28** (founder triage): T02, T04 and T03 are finished now, not at the 2027-01-31 > deadline. One attended `admin` run covers T02 and T04; T03 follows from its results. The > workplan then closes. The quarterly repeat lives in disaster-control's restore-proof register @@ -124,10 +127,17 @@ post-2026-10-25 generation. ```task id: NK-WP-0053-T03 -status: wait +status: done priority: low -blocking_reason: "Founder review right after the T02 run, using its results: renew the single-provider acceptance or open a second-provider intake. Not deferred to the 2027-01-31 deadline." +decision_id: "e8935fa6-ada8-4d15-bef2-4deb9671502a" state_hub_task_id: "0fa4add7-3d53-51af-a2a2-ea9c63a2d628" ``` Use the drill results to put the single-provider question back to the founder. + +**Done 2026-10-30, founder decision `e8935fa6`:** open a second-provider intake. railiance-platform adds the +backup profile's planned Scaleway secondary for the full identity bundle (`application-archives/net-kingdom/`, +own scoped credential, readback proof). The G1 acceptance continues until 2027-01-31 or until the second copy +is proven, whichever is first. Basis: the drill passed, but the single 10 GiB Storage Share account filled and +no generation was written 2026-10-20..29 without alert (NK-WP-0055-T07). Quota, CNPG remote retention and the +G2 alert remain required. The intake is tracked in NK-WP-0055-T07. diff --git a/workplans/NK-WP-0055-security-platform-production-readiness.md b/workplans/NK-WP-0055-security-platform-production-readiness.md index 18224d9..824fd74 100644 --- a/workplans/NK-WP-0055-security-platform-production-readiness.md +++ b/workplans/NK-WP-0055-security-platform-production-readiness.md @@ -240,6 +240,11 @@ folder. Follow-ups routed to owners: railiance-platform (CNPG remote retention, secondary, confirm a verified full Forgejo archive on Scaleway, quota), disaster-control (alert on backup refusal). Next: a fresh generation, then drill stages 1 and 5 on it. +2026-10-29/30: fresh generation `20261029T230600Z` captured after space was freed; the NK-WP-0053 drill +passed on it (next due 2027-01-29). G1 decision `e8935fa6`: second-provider intake to railiance-platform for +a Scaleway secondary of the full identity bundle; this task tracks it, with the Backup quota, CNPG remote +retention and the refusal/staleness alert. + ## Decide durable custody for receipts kept outside Git ```task