coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the first MAS offsite copy sealed to the custody-held age identity.

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4541@bnt-lap001
Assistant-Session: 2099b3aa-d7d9-49a9-ab4e-fa8b7d0e39e8
This commit is contained in:
codex 2026-11-03 08:29:12 +01:00
parent 90f859f395
commit 016c147976
2 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

48
docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json Normal file
View file

@ -0,0 +1,48 @@
{
"age_recipient": "age14kg8yh9f82kd53hrsnjynpcnwyv3fx8swhhw627ny5verh70jp4q03ar47",
"capture": {
"age_identity_on_node": false,
"facility_scaled": false,
"files": {
"events.jsonl": {
"bytes": 51382,
"present": true
},
"tickets-outbox.sqlite3": {
"bytes": 20480,
"present": true
},
"tickets.sqlite3": {
"bytes": 45056,
"present": true
}
},
"image": "docker.io/library/mas-live:v0.2-480e69a",
"mail_sent": false,
"relay_read": false,
"volume": "pvc-415825c2-35db-4fc6-b58e-726dbb82c5d3"
},
"freshness_service": "passed",
"identity_custody": "platform/recovery/mas/age-identity v1",
"receipt": {
"application": "mas",
"captured_at": "2026-11-03T07:28:38Z",
"ciphertext_bytes": 133352,
"ciphertext_sha256": "d2f287ed65114e618ab2e6605f551d362152ef9d8aa231d1ce9206588dcfdb91",
"destination": "s3://railiance-platform-pg-backup/platform-pg/application-archives/mas/2026/11/03/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age",
"immutable_create": true,
"multipart_completed": true,
"object_key": "platform-pg/application-archives/mas/2026/11/03/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age",
"remote_retrieval_verified": true,
"retained_objects_deleted": false,
"run": "20261103T072837Z",
"schema": "platform.application-primary-archive.v1",
"status": "offsite_fetched_verified",
"version_id": "1793690919900126"
},
"runner": "attended: founder replaced /etc/mas-backup/age-recipient (sha256 0b912f12\u2026eace) and started mas-evidence-backup.service and mas-evidence-freshness.service on railiance01",
"schema": "platform.mas-evidence-offsite.v1",
"task": "RPF-WP-0070-T04",
"values_recorded": false,
"workplan": "RPF-WP-0070"
}

8
workplans/RPF-WP-0070-mas-evidence-recovery.md
View file

@ -295,6 +295,14 @@ recipient is `age14kg8yh9f82kd53hrsnjynpcnwyv3fx8swhhw627ny5verh70jp4q03ar47`,
and `deploy/mas-backup/age-recipient` now holds it. Receipt:
`docs/evidence/mas-evidence-age-escrow-2026-11-03.json`.
2026-11-03 07:28Z: the founder replaced `/etc/mas-backup/age-recipient` on
the node (hash checked) and ran one backup and one freshness check. Both
passed. Object `…/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age` is
at version `1793690919900126`, 133352 bytes, SHA256 `d2f287ed…db91`,
sealed to the custody-held recipient, with the readback verified.
Receipt: `docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json`.
The T04 rehearsal runs against this object.
## Escrow the age identity and get owner acceptance
```task