RPF-WP-0015-T03: GO record cites round-6 approvals and E2 deferral terms
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883
This commit is contained in:
parent
133628c573
commit
a55cfbe116
1 changed files with 21 additions and 8 deletions
|
|
@ -8,14 +8,14 @@
|
|||
"recorded_at": "2026-10-14T17:24:57Z",
|
||||
"authority": "D5 2fd5849c (outage exercise authorized 2026-10-11) + this per-window founder GO",
|
||||
"abort_operator": "founder (platform-root), attended",
|
||||
"independent_abort_owner": "railiance-infra (procedure receipt 0300d069)",
|
||||
"owner_procedure_approvals_contract": "ea3f53d664f7357ccfefa31800467a82e19576e92af20783e811de24e49a2b7a",
|
||||
"independent_abort_owner": "railiance-infra (procedure receipt 2742b9e8)",
|
||||
"owner_procedure_approvals_contract": "60d78a9ef1ca4cc13b71cbd333490f58e17cdc50212c62ade6835c891b31fe45",
|
||||
"owner_procedure_approvals": {
|
||||
"audit-core": "b3c564a6-93f9-4c07-872b-7feb22cccb73",
|
||||
"rapp-postgres": "08a84caf-5cf9-4f90-8dba-98f9f43677e2",
|
||||
"railiance-platform": "0f8f0692-1549-4070-8428-0d9284e4d8d5",
|
||||
"railiance-cluster": "4bb0d7af-b644-44f3-acc8-69c7321e9824",
|
||||
"railiance-infra": "0300d069-90ad-47fa-992d-ead7b686a720"
|
||||
"audit-core": "ec4995b5-e1b2-4c66-9f8d-5ac8d6ceb149",
|
||||
"rapp-postgres": "10400314-b4e4-4f8f-8025-b255153f9b61",
|
||||
"railiance-platform": "ff30b9af-5eca-4419-a087-77200c9e8c31",
|
||||
"railiance-cluster": "5301d4fb-0631-4ac5-8471-531e5362b2ba",
|
||||
"railiance-infra": "2742b9e8-456a-4b58-9ad1-a033fc3ac67d"
|
||||
},
|
||||
"conditions": "Window proceeds only after the hold-point preflight reports ready_for_live_execution true and a final founder go/no-go. Consumed decisions 449a697a/85724c0c and scenario WARDEN-WP-0027-T02-DRILL-20260822-01 are not reused.",
|
||||
"secret_values_observed": false,
|
||||
|
|
@ -24,10 +24,23 @@
|
|||
"question": "Snapshot lane verifies the encrypted copy by decrypting it in memory with the offsite escrow key (AGE_PRIVATE_KEY at platform/workloads/railiance/backup/offsite-lane, normally restore-drills only). Allow that read during the attended snapshot?",
|
||||
"decided_by_role": "founder",
|
||||
"decided_at": "2026-10-14 (attended Claude Code session, before the snapshot lane review)",
|
||||
"scope": "RPF-WP-0015-T03 attended snapshot lane only; key held in process memory and a shredded 0700 temp dir, never logged or written to Git/hub"
|
||||
"scope": "RPF-WP-0015-T03 attended snapshot lane only; key passed over stdin and held in process memory, never written to disk, logged, or put in Git/hub"
|
||||
},
|
||||
"upload_folder": {
|
||||
"decision": "railiance-backups/openbao/ created by the founder on the offsite share",
|
||||
"decided_by_role": "founder"
|
||||
},
|
||||
"synthetic_e2_deferral": {
|
||||
"decision": "Chain check only tonight; synthetic E2 deferred to its own attended window",
|
||||
"decided_by_role": "founder",
|
||||
"decided_at": "2026-10-14 (attended session)",
|
||||
"audit_core_conditions": [
|
||||
"pre-reboot chain-head attestation and hash recorded",
|
||||
"post-reboot /healthz 200, /readyz recovers without restarting audit-core; pod UID and restart count recorded",
|
||||
"verify-chain reports no break and the pre-reboot head is present",
|
||||
"attest-chain succeeds with a new attestation",
|
||||
"T03 is not marked as proving the synthetic E2 path until the follow-up E2 window runs through the reviewed sender lane"
|
||||
],
|
||||
"audit_core_acceptance": "ec4995b5-e1b2-4c66-9f8d-5ac8d6ceb149"
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue