coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0064-T05: record founder acceptance of the T02 design choices

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4384@bnt-lap001
Assistant-Session: 80d1f3da-7a91-4519-9737-9ba128b4da64
This commit is contained in:
codex 2026-10-23 21:06:37 +02:00
parent 39bf724a14
commit fb0b50234d
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/RPF-WP-0064-isolated-original-openbao-restore.md
View file

@ -341,6 +341,12 @@ blocking_reason: "Founder signs (ssh-keygen -Y sign, namespace railiance-openbao
state_hub_task_id: "a954eaf9-855b-5458-9f13-c6cfed289934"
```
2026-10-23: the founder accepted the three T02 design choices before signing: (1) readback through
a temporary root credential generated from the two entered shares, revoked and checked dead before
teardown; (2) unauthenticated generate-root enabled only on the target's own loopback listener inside
the networkless container; (3) strict match of restored role/policy objects against current source,
so a snapshot older than a later source edit yields `refused`. Signing T05 still confirms them per attempt.
## T06 — Owner confirmation of package pin
```task