Accept requester workload delivery and retain separate rotation residual
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-05 00:13:30 +02:00
parent 7bf938336f
commit b51e91cc6f
4 changed files with 49 additions and 6 deletions

View file

@ -77,3 +77,23 @@ description: >-
migration gate in RPF-WP-0035.
state_hub_intake_id: "01a0fedd-7d19-76de-8857-59409393b2b0"
```
## RPF-IN-0004 — Sitting-requester issuer rotation and projection proof
```yaml
id: RPF-IN-0004
kind: intake
title: "Sitting-requester issuer rotation and changed-projection proof"
status: open
origin: residual
origin_ref: RPF-WP-0051
priority: medium
owner: railiance-platform
requested_by: codex
description: >-
Initial requester workload delivery is accepted under CCR-2026-0032. Plan
separately governed issuer rotation with KeyCape and informed-decision,
including actual changed-file pickup and predecessor credential rejection.
Initial cutover approval excludes rotation; do not rotate or broaden custody
under that approval. Preserve exact path, scope and human-control boundaries.
```