f9af3243b9
Validated escrow consumption end-to-end on a genuinely key-less box against the real felhom-spike datastore: recover K from (blob,R) via the real escrow.Unwrap, restore REAL data (spike-lxc rootfs, 2.5G) with the recovered key only, wrong-R fails closed (no plausible-but-wrong key), live K byte-unchanged. Redacted (no R/K/secret). GO to spec 10C + build 10D. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>