---
id: capability.security.bootstrap-recovery
owner: net-kingdom
status: draft
domain: infotech
maturity:
  discovery:
    current: D3
    target: D5
    confidence: medium
    rationale: Owner scope, neighboring responsibilities, concrete use cases and limitations
      are documented; no exhaustive or generalized maturity claim.
  availability:
    current: A2
    target: A2
    confidence: medium
    rationale: 'Source interface assessed 2026-10-14: Local identity, bootstrap console,
      encrypted custody handoff and caller tools. Availability describes the delivery
      form, not production acceptance. Source repairs and disposable native fixtures
      do not prove estate root isolation or recovery.'
external_evidence:
  completeness:
    level: C1
    confidence: low
    basis: Source artifacts establish a bounded capability; no independent consumer-completeness
      assessment in this review.
  reliability:
    level: R0
    confidence: low
    basis: No longitudinal consumer reliability measurement established by this review.
name: Guarded bootstrap and recovery preparation
summary: Local identity, bootstrap console, encrypted custody handoff and caller tools.
tags:
- security
- netkingdom
- framework-reuse
discovery:
  intent: Local identity, bootstrap console, encrypted custody handoff and caller
    tools
  includes:
  - Local identity, bootstrap console, encrypted custody handoff and caller tools
  excludes:
  - Source repairs and disposable native fixtures do not prove estate root isolation
    or recovery
  use_cases:
  - 'U10: Operator recovers identity, custody or data with independently held recovery
    material'
availability:
  current_level: A2
  target_level: A2
  current_artifacts:
  - tools/security-bootstrap-console/README.md
  - tools/custody-record/README.md
  consumption_modes:
  - CLI
  - source
relations:
  related_to:
  - capability.security.practice-canon
  - capability.security.doctrine-review
  - capability.iam.key-cape
  - capability.authorization.policy-evaluate
  - capability.registry.register
  specializes:
  - capability.security.iam-tooling-suite
evidence:
  documentation:
  - tools/security-bootstrap-console/README.md
  - tools/custody-record/README.md
consumer_guidance:
  recommended_for:
  - Operator recovers identity, custody or data with independently held recovery material
  not_recommended_for:
  - Source repairs and disposable native fixtures do not prove estate root isolation
    or recovery
  known_limitations:
  - Source repairs and disposable native fixtures do not prove estate root isolation
    or recovery
  - 2026-10-14 architecture review estimates operational maturity separately; a registry
    entry does not authorize execution or establish deployment.
---

# Guarded bootstrap and recovery preparation

Local identity, bootstrap console, encrypted custody handoff and caller tools.

## Reuse boundary

Source repairs and disposable native fixtures do not prove estate root isolation or recovery.

## Supported use cases

- U10: Operator recovers identity, custody or data with independently held recovery material

## Evidence and integration

- [tools/security-bootstrap-console/README.md](../../tools/security-bootstrap-console/README.md)
- [tools/custody-record/README.md](../../tools/custody-record/README.md)

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.