tegwick
dca999222f
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
48 lines
2.4 KiB
JSON
48 lines
2.4 KiB
JSON
{
|
|
"workplan": "NK-WP-0049",
|
|
"observed_at": "2026-10-15T22:24:49.717396+00:00",
|
|
"status": "offhost_privacyidea_database_recovered_full_identity_coverage_open",
|
|
"backup_destinations_operator_reported": [
|
|
"Scaleway",
|
|
"Storage Share"
|
|
],
|
|
"exact_offhost_artifact_confirmed": true,
|
|
"independently_held_matching_key_confirmed": true,
|
|
"recovery_key_or_backup_contents_retrieved": true,
|
|
"legacy_token_secret_present": true,
|
|
"legacy_trigger_secret_present": true,
|
|
"legacy_provider_revocation_proven": false,
|
|
"native_recovery_proven": false,
|
|
"deferred_exposure_rotation_reopened": false,
|
|
"caller_inventory": "caller-source-inventory.json",
|
|
"verification": "source-verification.json",
|
|
"ceremony": "../../bootstrap-recovery-ceremony.md",
|
|
"outstanding": [
|
|
"Prepare and admit missing encrypted identity data/key/config backup coverage; operator confirms no known full identity bundle",
|
|
"Retrieve new off-host bundle and prove original token decryption, audit continuity, directory and issuer recovery with safe negative cases and cleanup",
|
|
"T02 current caller/provider source admission and exact legacy provider credential disposition; retain existing deferred-rotation boundary"
|
|
],
|
|
"operator_reports_holding_railiance_backup_age_key": true,
|
|
"operator_report_recorded_at": "2026-10-15T21:52:22.549430+00:00",
|
|
"key_material_received": false,
|
|
"key_matches_selected_ciphertext_verified": true,
|
|
"offsite_discovery": "offsite-discovery-summary.json",
|
|
"privacyidea_database_ciphertext_identified": true,
|
|
"required_full_asset_coverage_confirmed": false,
|
|
"operator_reports_recipient_check_passed": true,
|
|
"operator_reports_temporary_key_cleanup": true,
|
|
"private_key_received_by_agent": false,
|
|
"ciphertext_fetched": true,
|
|
"transfer_receipt": "privacyidea-transfer-r1.json",
|
|
"prepared_database_drill": "../../bootstrap-recovery-ceremony.md",
|
|
"age_private_key_retrieved_by_agent": false,
|
|
"offhost_database_restore_proven": true,
|
|
"database_drill_receipt": "privacyidea-database-drill-r1.json",
|
|
"database_drill_review": "database-drill-review.json",
|
|
"operator_reports_no_known_full_identity_bundle": true,
|
|
"identity_backup_profile": "../../../tools/bootstrap-recovery/identity-backup-profile.json",
|
|
"identity_coverage_preparation": "identity-backup-preparation-r1.json",
|
|
"coverage_preparation_status": "prepared_not_admitted",
|
|
"coverage_preparation_tests_passed": 14,
|
|
"coverage_decision_id": "ed20023f-0168-421d-be86-460391339876"
|
|
}
|