RPF-WP-0015-T03: record drill PVC removal and founder backup waiver

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 680842@bnt-lap001
Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883

workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md

@@ -471,3 +471,16 @@ Follow-ups (owners, not blocking T02): guard revocation on Secret refreshTime +
 container startedAt (audit-core/rapp-postgres); ESO refresh interval equals role TTL
 (audit-core/ESO); ops-warden strip OPENBAO_TOKEN; founder: revoke/remove the standing
 shell-profile OPENBAO_TOKEN.
+
+T03 pre-window gates cleared 2026-10-14 (founder GO in session):
+- Stuck drill PVC `platform-pg-drill/platform-pg-drill-1` (rapp-postgres drill scratch,
+  deletion requested 2026-08-13, namespace and CNPG owner gone, no pod or attachment):
+  the API refused to patch an object in a missing namespace, so the empty namespace was
+  recreated, the pvc-protection finalizer removed, the claim and its local-path PV
+  (reclaim Delete) released, and the namespace deleted again. The node-reboot preflight
+  now passes its terminating-PVC check without `--accept-terminating-pvc`.
+- Founder waiver: the fresh-backup recommendation for `state-hub-db`, `user-engine-pg`,
+  `net-kingdom-pg` and `target-revenue-pg` (no CNPG backup configured) is waived for the
+  T03 reboot window. A reboot keeps their local-path PVCs; the preflight's per-cluster
+  UID/PVC-UID/systemID comparison detects any re-bootstrap. platform-pg's fresh backup
+  remains required. Configuring backups for those clusters stays with their owners.