tegwick
f24af91211
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 308701@bnt-lap001 Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56
81 lines
No EOL
2.4 KiB
JSON
81 lines
No EOL
2.4 KiB
JSON
{
|
|
"schema": "netkingdom.identity-restore-drill.v1",
|
|
"work": "NK-WP-0053-T02/T04",
|
|
"date": "2026-10-29",
|
|
"operator": "admin (founder)",
|
|
"verdict": "pass",
|
|
"generations": {
|
|
"20261019T034919Z-cc53fb903f6a": "stages 1-4",
|
|
"20261029T230600Z-0f8eb0c39b56": "stages 1 and 5"
|
|
},
|
|
"stages": [
|
|
{
|
|
"stage": 1,
|
|
"name": "independent retrieval",
|
|
"result": "pass",
|
|
"receipts": [
|
|
"transfer-20261019.json",
|
|
"transfer-20261029.json"
|
|
],
|
|
"identity": "founder, Backup app password at prompt"
|
|
},
|
|
{
|
|
"stage": 2,
|
|
"name": "LLDAP",
|
|
"result": "pass",
|
|
"receipt": "lldap-recovery.json",
|
|
"login_tested": "admin"
|
|
},
|
|
{
|
|
"stage": 3,
|
|
"name": "privacyIDEA",
|
|
"result": "pass",
|
|
"receipt": "privacyidea-recovery.json"
|
|
},
|
|
{
|
|
"stage": 4,
|
|
"name": "Authelia",
|
|
"result": "pass",
|
|
"receipt": "authelia-recovery.json",
|
|
"login_tested": "admin"
|
|
},
|
|
{
|
|
"stage": 5,
|
|
"name": "by-user MFA",
|
|
"result": "pass",
|
|
"receipt": "privacyidea-mfa-recovery.json",
|
|
"login_tested": "admin (realm coulomb)"
|
|
}
|
|
],
|
|
"attempts_not_counted": [
|
|
{
|
|
"receipt": "attempts/authelia-1-failed.json",
|
|
"cause": "operator mistyped the admin password (founder, 2026-10-29)"
|
|
},
|
|
{
|
|
"receipt": "attempts/authelia-2-failed.json",
|
|
"cause": "operator mistyped the admin password (founder, 2026-10-29)"
|
|
},
|
|
{
|
|
"receipt": null,
|
|
"stage": 3,
|
|
"cause": "run interrupted at a prompt before any receipt; restarted (founder, 2026-10-29)"
|
|
},
|
|
{
|
|
"receipt": "attempts/privacyidea-mfa-1-failed.json",
|
|
"cause": "mistyped login name (founder, 2026-10-29)"
|
|
},
|
|
{
|
|
"receipt": "attempts/privacyidea-mfa-2-failed.json",
|
|
"cause": "19 Oct generation predates admin's OTP enrolment: no token"
|
|
},
|
|
{
|
|
"receipt": "attempts/privacyidea-mfa-3-failed.json",
|
|
"cause": "19 Oct generation predates admin's OTP enrolment: no token (user_token_count 0)"
|
|
}
|
|
],
|
|
"finding": "No identity backup 2026-10-20..29 (full Storage Share account); see NK-WP-0055-T07. Fresh generation captured 2026-10-29T23:06Z after the founder freed space.",
|
|
"crisis_custody_list_checked": "before the drill (NK-WP-0054-T07 confirmations 2026-10-28)",
|
|
"next_due": "2027-01-29",
|
|
"secret_values_recorded": false
|
|
} |