R-924: live run + restore test evidence; STATUS and report

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-09 15:02:37 +02:00
parent 96f68f1b44
commit a05345eeb6
3 changed files with 22 additions and 3 deletions
@@ -11,8 +11,8 @@
  back on a throwaway machine: it starts, with your 1 account and 797 items. Nobody opened the items.
 - **The circle is broken only when you print the sheet.** The copy on ep0 opens with one key, and that key was only
  in the password manager on DooPlex. The sheet lists the keys to print, with the commands. It holds no value itself.
- **New finding: the signing keys live only on DooPlex**, with no password and in no backup. If DooPlex is lost, no
-  box can take a signed update again without a visit. Your decision (see the report).
+- **The signing keys now go off-site too** (your answer A). They were only on DooPlex, in no backup. The Sunday test
+  proves each key still matches. Print them as well (lines S6a/S6b on the sheet).
 - **Built, not released:** a household that clears its mail address gets it deleted on the hub (your answer A); a
  restored hub sends no mail until you release it; the backup no longer stops the apps when another backup is still
  running. Found and fixed on the way: one box's key could change another household's mail settings.