coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0064-T10: break-glass drill drilled and independently verified
All checks were successful
CCR intake gate / gate (push) Successful in 2m11s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4515@bnt-lap001
Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354
This commit is contained in:
codex 2026-10-28 00:47:35 +01:00
parent 3727f8bc7a
commit 42c06d8db4
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
workplans/RPF-WP-0064-isolated-original-openbao-restore.md
View file

@ -708,6 +708,19 @@ No live run is part of the source preparation.
fake held token (`drilled`, `valid: false`) and a wrong re-entered share (`aborted`, `generate_root_failed`).
The native rehearsal uses local Docker with `--network none`, the pinned 2.5.4 image and generated material.
### Drill result (2026-10-28)
Attempt `RPF-WP-0064-T10-20261027-01`, admission `sha256:741fa571…ce7a`, adapter `3727f8b`, founder-run:
**`drilled`** (`break_glass_drill_complete`) in 101 s. Receipt
`sha256:e4591346e99b23e405f1cb69f6f5158dbdb7b5d69b2d1d7709c563a74cc18397` (outside Git, mode 0400) verified
`PASS` in-run and again from a clean clone at `3727f8b`. Held initial root token valid as of the 2026-10-14
snapshot (root, ttl 0, no expiry, orphan); fresh generate-root complete with re-entered shares, `sys/auth`
read-only action ok, revoke-self 204, post-revoke lookup 403, cancel drilled; teardown complete, no volumes.
The snapshot ciphertext was retrieved again from Storage Share (`/dev/shm` had been cleared) and the
admission was rebuilt from the template with the `-03` receipt's snapshot facts. NetKingdom post-event
record: `net-kingdom/docs/evidence/2026-10-28-king-path-drill.md`. Still open for T10: the read-only
production SSO-down walk and the founder's decision on revoking the held root token on production.
### Founder runbook: drill (isolated restore on the workstation, never production)
Run each block in your own terminal. Nothing below needs the cluster. Snapshot facts are reused from the