security: verify backup credential requests against recovered archive and live job
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
codex 2026-10-16 09:42:10 +02:00
parent 8164c57467
commit 5f30ddd90c
2 changed files with 24 additions and 2 deletions

View file

@ -4,7 +4,7 @@
"schema_version": 1,
"request_type": "workload-kv-read",
"title": "NetKingdom identity backup publisher delivery",
"status": "applied",
"status": "verified",
"created": "2026-10-16",
"updated": "2026-10-16",
"requester": {
@ -143,6 +143,17 @@
"bounded_policy_ttl": true,
"eso_equality_verified": true,
"temporary_reader_revoked": true
},
"actual_archive_and_runtime_acceptance": {
"owner_repo": "net-kingdom",
"archive_recovery": "docs/evidence/2026-10-16-identity-backup-live/actual-full-recovery-review.json",
"activation": "docs/evidence/2026-10-16-identity-backup-live/activation-review.json",
"recurring_job": "docs/evidence/2026-10-16-identity-backup-live/recurring-job-review.json",
"independent_owner_retrieval_and_key_recovery_passed": true,
"systemd_job_result": "success",
"timers_enabled": true,
"retention_pinned_and_newest_protected": true,
"native_full_service_authentication_claimed": false
}
},
"state_hub": {

View file

@ -4,7 +4,7 @@
"schema_version": 1,
"request_type": "workload-kv-read",
"title": "NetKingdom identity backup retention delivery",
"status": "applied",
"status": "verified",
"created": "2026-10-16",
"updated": "2026-10-16",
"requester": {
@ -143,6 +143,17 @@
"bounded_policy_ttl": true,
"eso_equality_verified": true,
"temporary_reader_revoked": true
},
"actual_archive_and_runtime_acceptance": {
"owner_repo": "net-kingdom",
"archive_recovery": "docs/evidence/2026-10-16-identity-backup-live/actual-full-recovery-review.json",
"activation": "docs/evidence/2026-10-16-identity-backup-live/activation-review.json",
"recurring_job": "docs/evidence/2026-10-16-identity-backup-live/recurring-job-review.json",
"independent_owner_retrieval_and_key_recovery_passed": true,
"systemd_job_result": "success",
"timers_enabled": true,
"retention_pinned_and_newest_protected": true,
"native_full_service_authentication_claimed": false
}
},
"state_hub": {