From fb0b50234d717b8afd7cdfef5e45cad097c5f9fb Mon Sep 17 00:00:00 2001 From: codex Date: Fri, 23 Oct 2026 21:06:37 +0200 Subject: [PATCH] RPF-WP-0064-T05: record founder acceptance of the T02 design choices Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 4384@bnt-lap001 Assistant-Session: 80d1f3da-7a91-4519-9737-9ba128b4da64 --- workplans/RPF-WP-0064-isolated-original-openbao-restore.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/workplans/RPF-WP-0064-isolated-original-openbao-restore.md b/workplans/RPF-WP-0064-isolated-original-openbao-restore.md index 6dceacb..c223a47 100644 --- a/workplans/RPF-WP-0064-isolated-original-openbao-restore.md +++ b/workplans/RPF-WP-0064-isolated-original-openbao-restore.md @@ -341,6 +341,12 @@ blocking_reason: "Founder signs (ssh-keygen -Y sign, namespace railiance-openbao state_hub_task_id: "a954eaf9-855b-5458-9f13-c6cfed289934" ``` +2026-10-23: the founder accepted the three T02 design choices before signing: (1) readback through +a temporary root credential generated from the two entered shares, revoked and checked dead before +teardown; (2) unauthenticated generate-root enabled only on the target's own loopback listener inside +the networkless container; (3) strict match of restored role/policy objects against current source, +so a snapshot older than a later source edit yields `refused`. Signing T05 still confirms them per attempt. + ## T06 — Owner confirmation of package pin ```task