coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close RPF-WP-0029-T02 on operator-attested predecessor unshare.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Record metadata-only invalidation of the personal Nextcloud file-drop.
No predecessor value was captured; age-key taint stays open.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
This commit is contained in:
codex 2026-09-15 02:48:15 +02:00
parent f3668f4f0a
commit 6dfb751e60
4 changed files with 52 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

25
workplans/RPF-WP-0029-backup-credential-default-removal.md
View file

@ -4,11 +4,11 @@ type: workplan
title: "Remove backup credential default and verify governed replacement"
domain: financials
repo: railiance-platform
status: blocked
status: finished
flavor: implementation
owner: codex
created: "2026-09-05"
updated: "2026-09-06"
updated: "2026-09-15"
state_hub_workstream_id: "bb326ebb-a313-549e-b35f-1bf17e1c58fd"
---
@ -37,7 +37,7 @@ redirects/non-success status. Added transport containment and failure tests.
```task
id: RPF-WP-0029-T02
status: wait
status: done
priority: high
state_hub_task_id: "b3f3402f-890b-5781-9b3e-1c9c0d28cea8"
```
@ -51,8 +51,8 @@ recovery passed on September 6 (evidence below). Activity-core is
also a consumer of this upload lane. Preserve AGE_PRIVATE_KEY and historical
exposure evidence; upload-token rotation cannot clear recovery-key taint.
T03 proves encrypted fixture transport and decryption; September 6 evidence
also proves full application recovery. Historical predecessor invalidation
remains open.
also proves full application recovery. Operator attested predecessor unshare
on 2026-09-15.
## Portfolio review — 2026-09-05
@ -153,8 +153,19 @@ Replacement recovery PASSED: isolated Forgejo healthy, 142 repositories, six
users, two public Git clones plus fsck, and all 2,040 package blob digests
verified. Disposable resources removed. Evidence:
`docs/evidence/RPF-WP-0029-secondary-restore-2026-09-06.json`.
T02 remains `wait` solely for the Bernd-owned predecessor invalidation/custody
receipt; do not repeat the completed replacement restore as an open gate.
T02 closed 2026-09-15 on operator-attested unshare of the Bernd-owned
predecessor file-drop. No predecessor value, fingerprint, length or shape was
recorded. The 401/403 probe was not run; the predecessor must not be
reconstructed. Replacement recovery remains the 2026-09-06 receipt. Age-key
exposure taint is unchanged. Evidence:
`docs/evidence/2026-09-15-rpf-wp-0029-predecessor-share-invalidated.json`.
Rejected drill-copy cleanup completed with conditional DELETE 204; attended
session exited 0. Temporary plaintext removed; good encrypted backups retained.
## Closeout — 2026-09-15
T01–T03 are done. Live closure of the upload-share predecessor is operator-
attested unshare; replacement recovery was already proven 2026-09-06. The
historical AGE_PRIVATE_KEY exposure remains a separate taint and is not
cleared by this share revocation.