a252447058
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
20 lines
1.3 KiB
Markdown
20 lines
1.3 KiB
Markdown
# Non-authoritative publisher history recovery copy
|
|
|
|
This directory contains only the validated non-secret empty publication baseline
|
|
and immutable history receipt. It is an independent recovery copy, not a read
|
|
surface or a ceremony, and must never mint a grant. Runtime reads OpenBao only.
|
|
Retain every newer publisher revision here; do not replace/remove old receipts.
|
|
|
|
The approved owner Forgejo repository backup contract covers source/history;
|
|
this copy enters that established scope after commit/push. Exact remote Git
|
|
retrieval/readback can prove this copy survives loss of the local publisher
|
|
files. A fresh Nextcloud/Scaleway Forgejo archive containing this commit is a
|
|
separate provider-generation proof and is not implied by push or Git readback.
|
|
The attended finish helper instead directly encrypts retained publisher history
|
|
and verifies upload/download/decryption using the current governed Nextcloud
|
|
lane, reusing established owner storage and adding no new service or credential.
|
|
|
|
Controlled restoration copies baseline.json and history/ to the private operator
|
|
state directory, preserves mode0600 and independently compares the latest
|
|
record/digest/KV version against authenticated OpenBao readback. An older
|
|
snapshot alone cannot reset the independent high-water record.
|