6dfb751e60
Record metadata-only invalidation of the personal Nextcloud file-drop. No predecessor value was captured; age-key taint stays open. Assistant: grok Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a |
||
|---|---|---|
| .. | ||
| archived | ||
| .gitkeep | ||
| README.md | ||
| RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | ||
| RPF-WP-0025-openbao-operator-only-access.md | ||
| RPF-WP-0027-keycape-live-secret-exposure-recovery.md | ||
| RPF-WP-0029-backup-credential-default-removal.md | ||
| RPF-WP-0035-credential-lane-implementation.md | ||
| RPF-WP-0036-platform-service-assurance.md | ||
| RPF-WP-0038-forgejo-scaleway-primary-coverage.md | ||
| RPF-WP-0039-vergabe-demo-company-database.md | ||
| RPF-WP-0040-keycape-factor-credential-custody.md | ||
| RPF-WP-0041-state-hub-105m-not-provisioning.md | ||
| RPF-WP-0042-informed-decision-sitting-requester.md | ||
Current platform work
Reviewed 2026-09-15. Open workplans below; RPF-WP-0029 finished on predecessor
unshare. Completed designs and implementations are under archived/; their IDs
and UUIDs are preserved. The number of blocked plans is not a count of missing
implementations or independent incidents.
| Workplan | Purpose and next gate | S3 boundary |
|---|---|---|
| RPF-WP-0027 | Incident custody and final evidence; accept NetKingdom's residual disposition and publish exact custody handoff | The bundle was already rotated. Provider/MFA reconciliation belongs to NetKingdom. |
| RPF-WP-0025 | Public Ingress retracted 2026-09-15; private tunnel remains | DNS withdrawal with railiance-infra; rollback phrase still available. | | RPF-WP-0015 | Two prepared recovery exercises; registered load driver exists; fresh sender/window/abort approvals and custody readiness remain | S3 contributes lease/ESO and snapshot/unseal proof; S1/S2 and audit-core execute their parts. | | RPF-WP-0035 | Three remaining lanes: secrets-engine JWT, Fluid operator KV, KeyCape approval clients | Signing T04 is complete; T05 admission answered and awaiting owner approval plus a founder-attended window. | | RPF-WP-0036 | Implemented local assurance/admission; waits for recurring restore evidence, Q2 reception and owner handoff | Run the assurance commands; live acceptance and external ownership remain gated. | | RPF-WP-0038 | Native backup, full Scaleway archive recovery and 273 MiB Nextcloud essentials recovery verified; scheduled tier cutover remains | Bind recurring caller/dependencies, verified inventory, quota checks and separate owner retention. | | RPF-WP-0042 | Sitting-requester CCR-2026-0026/0027 allocated; no apply | Do not widen 0024/0025. Attended seed waits on owner reviews and KeyCape row. |
RPF-WP-0036-T02/T05/T07 are complete; T03/T04/T06 retain the remaining acceptance gates. Treat credential exposure closure as the highest-priority attended work; task order does not combine or waive approvals.
Assessment and disposition of every plan and generated current record index.
Do not recreate completed workplans because an old Hub alias or generated brief still shows them active. Use source IDs, and follow AGENTS.md for verified sync.
Latest closure review
2026-09-05 blocker review: At that review: 12 unfinished tasks across six genuine blocked plans. The September 6 follow-up adds WP-0038 with one remaining full-archive task. All terminal plans have only done/cancel tasks. Completed ESO recovery RPF-WP-0037 is archived. Three retired Hub aliases still appear open; they are a derived-view defect, not three more workplans. Use this file before the dated generated brief.