Record the MAS offsite restore rehearsal and close RPF-WP-0070-T04.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4541@bnt-lap001
Assistant-Session: 2099b3aa-d7d9-49a9-ab4e-fa8b7d0e39e8

docs/evidence/mas-evidence-offsite-rehearsal-2026-11-03.json

@@ -0,0 +1,60 @@
+{
+  "ciphertext_bytes": 133352,
+  "ciphertext_sha256": "d2f287ed65114e618ab2e6605f551d362152ef9d8aa231d1ce9206588dcfdb91",
+  "credential": "supplier key on IAM application 25a4cbca (independent of the node workload pair)",
+  "elapsed_seconds": 0.39,
+  "fetch_seconds": 0.37,
+  "fetch_verified": true,
+  "identity_matches_recipient": true,
+  "identity_source": "platform/recovery/mas/age-identity",
+  "mail_sent": false,
+  "object_key": "platform-pg/application-archives/mas/2026/11/03/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age",
+  "production_restored": false,
+  "provider_mutations": false,
+  "receiver_enabled": false,
+  "restored": {
+    "captured_at": "2026-11-03T07:28:38Z",
+    "files": {
+      "events.jsonl": {
+        "bytes": 51382,
+        "events": 36,
+        "present": true,
+        "sha256_matches_capture": true
+      },
+      "tickets-outbox.sqlite3": {
+        "bytes": 20480,
+        "fingerprint_matches_capture": true,
+        "integrity_check": "ok",
+        "present": true,
+        "sha256_matches_capture": true,
+        "tables": {
+          "mailer_meta": 1,
+          "mode_outbox": 9
+        }
+      },
+      "tickets.sqlite3": {
+        "bytes": 45056,
+        "fingerprint_matches_capture": true,
+        "integrity_check": "ok",
+        "present": true,
+        "sha256_matches_capture": true,
+        "tables": {
+          "messages": 34,
+          "outbox": 9,
+          "tickets": 10
+        }
+      }
+    },
+    "image": "docker.io/library/mas-live:v0.2-480e69a"
+  },
+  "rto_minutes_provisional": 60,
+  "runner": "attended: founder ran scripts/mas_evidence_restore_rehearsal.py (2bb8c37) inside warden openbao-platform-admin-login",
+  "schema": "platform.mas-evidence-offsite-rehearsal.v1",
+  "scratch_removed": true,
+  "started_at": "2026-11-03T07:30:28Z",
+  "status": "passed",
+  "timing_note": "elapsed_seconds covers fetch, decrypt, restore and checks after login; attended OIDC login time is not included",
+  "values_recorded": false,
+  "version_id": "1793690919900126",
+  "within_rto": true
+}