docs: approve WP-0002 T03; wait on OpenBao bootstrap key

Human approved the Scaleway buy. Decision and inventory record
approved_on 2026-08-14. Bucket not created until the bootstrap key
is in OpenBao.

data/resources/platform-audit-storage.proposed.json

@@ -7,15 +7,15 @@
   "entity_gap": null,
   "description": "Off-host S3-compatible object store for rapp-postgres WAL archive and physical base backups. Procured by Railiance, operated as a Scaleway-delegated substrate on reef-storage, not on reef-railiance.",
   "decision": {
-    "status": "recommended",
+    "status": "approved",
     "chosen": "Scaleway Standard Multi-AZ nl-ams; independent secondary copy on Host Europe Backup Storage or governed Nextcloud (T06)",
     "rejected": [
       "Host Europe Cloud Storage as primary (S3 not confirmed orderable)",
       "Hetzner Object Storage as primary (no default at-rest encryption)",
       "Self-managed Garage as primary (labor and capacity lose at this workload)"
     ],
-    "approved_by": null,
-    "approved_on": null,
+    "approved_by": "human-financial-authority",
+    "approved_on": "2026-08-14",
     "ref": "docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md"
   },
   "operational_refs": [

docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md

@@ -1,13 +1,17 @@
 # RESOURCE-WP-0002 T03 — primary object-store selection
 
 Date: 2026-08-14  
-Status: **recommended — awaiting human purchase approval**  
+Status: **approved — waiting on Scaleway bootstrap key in OpenBao**  
 Resource: `resource:platform:audit-storage`  
 Procuring / consuming entity: `entity:railiance` (self-use, no 20 % markup)  
 Operating reef: `reef-storage` (not `reef-railiance`)
 
-This is the decision record T03 asked for. It is not a purchase. It does
-not create a Scaleway account, bucket, or key.
+Human financial authority approved the purchase in session 2026-08-14
+(“lets do it”, then “key into OpenBao first”). This file is no longer a
+recommendation-only draft. The bucket is **not** created until the
+bootstrap API key is in OpenBao
+(`platform/workloads/railiance/scaleway/bootstrap`). See
+`reef-storage/docs/put-scaleway-bootstrap.md`.
 
 ## Recommendation
 
@@ -78,5 +82,5 @@ primary without a new decision.
 ## Authority
 
 Recommended by: resource-control (this file)  
-Approved by: _vacant — human financial authority_  
-Approved on: _null_
+Approved by: human financial authority (Bernd Worsch, chat 2026-08-14)  
+Approved on: 2026-08-14

workplans/RESOURCE-WP-0002-procure-postgres-backup-storage.md

@@ -212,9 +212,11 @@ Progress 2026-08-14: decision record written —
 Primary: Scaleway Multi-AZ `nl-ams`. Secondary copy: Host Europe Backup
 Storage or Nextcloud (T06). Inventory stays `proposed` with five-facet
 refs to `reef-storage`. Reef seeded (identity, topology, consumers,
-planned attribute file). **Blocked on human approval to create the
-Scaleway project/bucket.** After yes: fill reef attributes, set
-`decision.status: approved` and inventory `ordered`.
+planned attribute file). **Purchase approved 2026-08-14.** Blocked on founder putting the
+Scaleway bootstrap API key in OpenBao
+(`platform/workloads/railiance/scaleway/bootstrap`,
+`reef-storage/docs/put-scaleway-bootstrap.md`). Do not paste the
+secret in chat. Then run `reef-storage/tools/create-platform-audit-bucket.sh`.
 
 ## T04 — Establish credential custody and hand off to rapp-postgres