3e904b750f
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883
57 lines
3.4 KiB
JSON
57 lines
3.4 KiB
JSON
{
|
|
"decision_id": "rpf-wp-0015-t03-founder-go-20261014-01",
|
|
"scenario_id": "RPF-WP-0015-T03-REBOOT-20261014-01",
|
|
"approved_window_id": "rpf-wp-0015-t03-window-20261014-01",
|
|
"task_id": "RAILIANCE-WP-0024-T03",
|
|
"decided_by_role": "founder",
|
|
"decided_in": "attended Claude Code session 2026-10-14 (answer: 'Today, I have 2 unseal holders')",
|
|
"recorded_at": "2026-10-14T17:24:57Z",
|
|
"authority": "D5 2fd5849c (outage exercise authorized 2026-10-11) + this per-window founder GO",
|
|
"abort_operator": "founder (platform-root), attended",
|
|
"independent_abort_owner": "railiance-infra (procedure receipt a234288a)",
|
|
"owner_procedure_approvals_contract": "3817c1df04a4ae3a4870a63e9abc24d5ea27f57d4e499cbdff582f1146bc8298",
|
|
"owner_procedure_approvals": {
|
|
"audit-core": "7c4019f2-348d-475e-9c96-e1ff6d0d27f5",
|
|
"rapp-postgres": "02f285e0-4285-4b0b-a50b-85665da4e9a2",
|
|
"railiance-platform": "b9ea904d-2670-498d-9fc5-a243f216914a",
|
|
"railiance-cluster": "2087b9ac-c980-4881-89f1-6b1088132f5b",
|
|
"railiance-infra": "a234288a-d084-4f76-850b-9094f51c4a0f"
|
|
},
|
|
"conditions": "Window proceeds only after the hold-point preflight reports ready_for_live_execution true and a final founder go/no-go. Consumed decisions 449a697a/85724c0c and scenario WARDEN-WP-0027-T02-DRILL-20260822-01 are not reused.",
|
|
"secret_values_observed": false,
|
|
"escrow_key_read": {
|
|
"decision": "Allow, in memory only",
|
|
"question": "Snapshot lane verifies the encrypted copy by decrypting it in memory with the offsite escrow key (AGE_PRIVATE_KEY at platform/workloads/railiance/backup/offsite-lane, normally restore-drills only). Allow that read during the attended snapshot?",
|
|
"decided_by_role": "founder",
|
|
"decided_at": "2026-10-14 (attended Claude Code session, before the snapshot lane review)",
|
|
"scope": "RPF-WP-0015-T03 attended snapshot lane only; key passed over stdin and held in process memory, never written to disk, logged, or put in Git/hub"
|
|
},
|
|
"upload_folder": {
|
|
"decision": "railiance-backups/openbao/ created by the founder on the offsite share",
|
|
"decided_by_role": "founder"
|
|
},
|
|
"synthetic_e2_deferral": {
|
|
"decision": "Chain check only tonight; synthetic E2 deferred to its own attended window",
|
|
"decided_by_role": "founder",
|
|
"decided_at": "2026-10-14 (attended session)",
|
|
"audit_core_conditions": [
|
|
"pre-reboot chain-head attestation and hash recorded",
|
|
"post-reboot /healthz 200, /readyz recovers without restarting audit-core; pod UID and restart count recorded",
|
|
"verify-chain reports no break and the pre-reboot head is present",
|
|
"attest-chain succeeds with a new attestation",
|
|
"T03 is not marked as proving the synthetic E2 path until the follow-up E2 window runs through the reviewed sender lane"
|
|
],
|
|
"audit_core_acceptance": "7c4019f2-348d-475e-9c96-e1ff6d0d27f5",
|
|
"follow_up": {
|
|
"target_date": "2026-10-15 (proposed; founder to confirm)",
|
|
"lane": "reviewed audit-core synthetic sender lane in its own attended window",
|
|
"records_as": "T03 completion evidence for the synthetic E2 path"
|
|
}
|
|
},
|
|
"custodian_key_check": {
|
|
"result": "founder's offline age identity railiance-backup.key derives age1zvryunvjhvpkmasskauga2heeg0ztnte9ymgppvjge36ekumk50syr3tsz (the offsite snapshot recipient)",
|
|
"checked_by_role": "founder",
|
|
"checked_at": "2026-10-14 (attended session, public key only)"
|
|
},
|
|
"window_console_receipt": "railiance-infra RAIL01-CONSOLE-20261014T175624Z"
|
|
}
|