diff --git a/reviews/RPF-WP-0015-T03-founder-go-20261014.json b/reviews/RPF-WP-0015-T03-founder-go-20261014.json index db4f37f..5029d41 100644 --- a/reviews/RPF-WP-0015-T03-founder-go-20261014.json +++ b/reviews/RPF-WP-0015-T03-founder-go-20261014.json @@ -8,14 +8,14 @@ "recorded_at": "2026-10-14T17:24:57Z", "authority": "D5 2fd5849c (outage exercise authorized 2026-10-11) + this per-window founder GO", "abort_operator": "founder (platform-root), attended", - "independent_abort_owner": "railiance-infra (procedure receipt 0300d069)", - "owner_procedure_approvals_contract": "ea3f53d664f7357ccfefa31800467a82e19576e92af20783e811de24e49a2b7a", + "independent_abort_owner": "railiance-infra (procedure receipt 2742b9e8)", + "owner_procedure_approvals_contract": "60d78a9ef1ca4cc13b71cbd333490f58e17cdc50212c62ade6835c891b31fe45", "owner_procedure_approvals": { - "audit-core": "b3c564a6-93f9-4c07-872b-7feb22cccb73", - "rapp-postgres": "08a84caf-5cf9-4f90-8dba-98f9f43677e2", - "railiance-platform": "0f8f0692-1549-4070-8428-0d9284e4d8d5", - "railiance-cluster": "4bb0d7af-b644-44f3-acc8-69c7321e9824", - "railiance-infra": "0300d069-90ad-47fa-992d-ead7b686a720" + "audit-core": "ec4995b5-e1b2-4c66-9f8d-5ac8d6ceb149", + "rapp-postgres": "10400314-b4e4-4f8f-8025-b255153f9b61", + "railiance-platform": "ff30b9af-5eca-4419-a087-77200c9e8c31", + "railiance-cluster": "5301d4fb-0631-4ac5-8471-531e5362b2ba", + "railiance-infra": "2742b9e8-456a-4b58-9ad1-a033fc3ac67d" }, "conditions": "Window proceeds only after the hold-point preflight reports ready_for_live_execution true and a final founder go/no-go. Consumed decisions 449a697a/85724c0c and scenario WARDEN-WP-0027-T02-DRILL-20260822-01 are not reused.", "secret_values_observed": false, @@ -24,10 +24,23 @@ "question": "Snapshot lane verifies the encrypted copy by decrypting it in memory with the offsite escrow key (AGE_PRIVATE_KEY at platform/workloads/railiance/backup/offsite-lane, normally restore-drills only). Allow that read during the attended snapshot?", "decided_by_role": "founder", "decided_at": "2026-10-14 (attended Claude Code session, before the snapshot lane review)", - "scope": "RPF-WP-0015-T03 attended snapshot lane only; key held in process memory and a shredded 0700 temp dir, never logged or written to Git/hub" + "scope": "RPF-WP-0015-T03 attended snapshot lane only; key passed over stdin and held in process memory, never written to disk, logged, or put in Git/hub" }, "upload_folder": { "decision": "railiance-backups/openbao/ created by the founder on the offsite share", "decided_by_role": "founder" + }, + "synthetic_e2_deferral": { + "decision": "Chain check only tonight; synthetic E2 deferred to its own attended window", + "decided_by_role": "founder", + "decided_at": "2026-10-14 (attended session)", + "audit_core_conditions": [ + "pre-reboot chain-head attestation and hash recorded", + "post-reboot /healthz 200, /readyz recovers without restarting audit-core; pod UID and restart count recorded", + "verify-chain reports no break and the pre-reboot head is present", + "attest-chain succeeds with a new attestation", + "T03 is not marked as proving the synthetic E2 path until the follow-up E2 window runs through the reviewed sender lane" + ], + "audit_core_acceptance": "ec4995b5-e1b2-4c66-9f8d-5ac8d6ceb149" } }