coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the MAS evidence supplier key path.
All checks were successful
CCR intake gate / gate (push) Successful in 1m11s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details

Browse source 
The founder stored the API key at platform/suppliers/scaleway/mas-evidence-backup-primary, preferred project mail-address-semantics. The workload pair and delivery admission stay unchanged.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
This commit is contained in:
codex 2026-11-02 11:33:10 +01:00
parent 363e63562b
commit 814469944c
3 changed files with 29 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
workplans/RPF-WP-0070-mas-evidence-recovery.md
View file

@ -40,7 +40,7 @@ status: progress
priority: medium
needs_human: true
depends_on: [RPF-WP-0053-T05]
intervention_note: "CCR-2026-0062 is applied. IAM application mas-evidence-backup-primary is 25a4cbca-220e-40c0-9af5-6c7713000174. The source bucket policy names that id under platform-pg/application-archives/mas/ with no object delete. No API key is stored. Delivery admission stays false. Age-identity escrow remains separate."
intervention_note: "CCR-2026-0062 is applied. IAM application mas-evidence-backup-primary is 25a4cbca-220e-40c0-9af5-6c7713000174. The founder stored its API key at platform/suppliers/scaleway/mas-evidence-backup-primary, preferred project mail-address-semantics. The source bucket policy names that id under platform-pg/application-archives/mas/ with no object delete. The workload pair is still empty. Delivery admission stays false. Age-identity escrow remains separate."
state_hub_task_id: "4f6484fb-8303-5dd5-94cb-b2622e1322c8"
```
@ -69,7 +69,11 @@ role were installed at 2026-11-02T09:02:50Z by the silent reader script.
IAM application `mas-evidence-backup-primary` is
`25a4cbca-220e-40c0-9af5-6c7713000174`. The source bucket policy allows
that id only under `platform-pg/application-archives/mas/` and does not
grant object delete. No API key is stored. The KV pair and
`/etc/mas-backup/primary.env` do not exist. Pair-custody lists still
grant object delete. The founder stored the API key at
`platform/suppliers/scaleway/mas-evidence-backup-primary`, preferred
project `mail-address-semantics`. ops-mason records that custody row and
ops-warden routes it as `scaleway-mas-evidence-backup-primary`. The
workload KV pair and `/etc/mas-backup/primary.env` do not exist.
Pair-custody lists still
name only coulomb-social and email-connect.
Design: `docs/credential-lane-designs/mas-evidence-backup-grant-2026-11-02.md`.