Part A: operator rulings 162-170 recorded; R-822 closed by ruling; R-836 P2; shared rule: no hub build/deploy without the operator

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-07 09:54:13 +02:00
parent 5ba1702fcf
commit 52262c75c1
4 changed files with 42 additions and 12 deletions
@@ -26,6 +26,14 @@

 ---

+## 2026-10-07 — the operator's answers on the night designs
+
+The full text of every row below: `git show 5ba1702fcf:documentation/backlog/OPEN-ITEMS.md`.
+
+| Row | What | Closed | Evidence |
+|---|---|---|---|
+| **R-822** | **An add-only key does not make retention safe: an attacker who can only ADD snapshots can make the honest pruner erase every real one.** (P2) | CLOSED 2026-10-07 — BY OPERATOR RULING (`09` §3 decision 166): the residual is accepted as a stated limit of decision 68 | Guard shipped controller v0.289.0; residual (past-dated fakes steering the keeps, a box-trusted window count) in `audits/night-burndown-2026-10-06/design-R-822.md`; the hub's own count is R-895, open. |
+
 ## 2026-10-07 (morning) — the read-back, the releases, the Tester 1 proof

 The full text of every row below: `git show 011a481a32:documentation/backlog/OPEN-ITEMS.md`.