From b879e85d6d14716c1b21438999f7a5f195e96758 Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 23 Aug 2026 15:06:50 +0200 Subject: [PATCH] Pin privacyIDEA resolver reconciliation gate Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093 --- ...LIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md index 82ea46e..f5864bc 100644 --- a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md +++ b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md @@ -70,6 +70,13 @@ template is published at `docs/keycape-exposure-rotation-approval.example.json`; no additional Secret apply is authorized by this receipt. +NetKingdom has now pinned the remaining attended resolver procedure at +`eec7007` (procedure checkout `f2e578c`, owner receipt +`45b236c8-052f-43d3-a472-44f8e9694da2`). It performs one resolver-only POST, +protected interactive inputs, boolean postchecks, replacement-success and +predecessor-denial evidence, and forward-only abort. T03 is ready for the +attended run; T04/T05 remain open until that run produces a sanitized receipt. + ## T04 — Execute the attended rotation ```task