tegwick
a1939a7d06
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
40 lines
2 KiB
JSON
40 lines
2 KiB
JSON
{
|
|
"workplan": "NK-WP-0049",
|
|
"observed_at": "2026-10-15T22:08:27.470032+00:00",
|
|
"status": "source_prepared_pending_owner_inputs_and_native_acceptance",
|
|
"backup_destinations_operator_reported": [
|
|
"Scaleway",
|
|
"Storage Share"
|
|
],
|
|
"exact_offhost_artifact_confirmed": true,
|
|
"independently_held_matching_key_confirmed": false,
|
|
"recovery_key_or_backup_contents_retrieved": true,
|
|
"legacy_token_secret_present": true,
|
|
"legacy_trigger_secret_present": true,
|
|
"legacy_provider_revocation_proven": false,
|
|
"native_recovery_proven": false,
|
|
"deferred_exposure_rotation_reopened": false,
|
|
"caller_inventory": "caller-source-inventory.json",
|
|
"verification": "source-verification.json",
|
|
"ceremony": "../../bootstrap-recovery-ceremony.md",
|
|
"outstanding": [
|
|
"Matching off-host identity data/key/config set remains unlocated in inspected scopes; selected existing PI database ciphertext is now fetched and digest-bound",
|
|
"Operator reports matching-recipient key check passed; actual ciphertext decryption/native database drill is prepared and pending operator hidden-key invocation",
|
|
"Full identity service recovery, token decryption, audit signature continuity and cleanup evidence",
|
|
"T02 current caller/provider source admission and exact legacy provider credential disposition; retain existing deferred-rotation boundary"
|
|
],
|
|
"operator_reports_holding_railiance_backup_age_key": true,
|
|
"operator_report_recorded_at": "2026-10-15T21:52:22.549430+00:00",
|
|
"key_material_received": false,
|
|
"key_matches_selected_ciphertext_verified": false,
|
|
"offsite_discovery": "offsite-discovery-summary.json",
|
|
"privacyidea_database_ciphertext_identified": true,
|
|
"required_full_asset_coverage_confirmed": false,
|
|
"operator_reports_recipient_check_passed": true,
|
|
"operator_reports_temporary_key_cleanup": true,
|
|
"private_key_received_by_agent": false,
|
|
"ciphertext_fetched": true,
|
|
"transfer_receipt": "privacyidea-transfer-r1.json",
|
|
"prepared_database_drill": "../../bootstrap-recovery-ceremony.md",
|
|
"age_private_key_retrieved_by_agent": false
|
|
}
|