admin
c758c97a1a
escrow-create -storage felhom-offsite -identity-bundle -directive -upload on felhom-pve: fresh R (operator-recorded off-transcript) wraps K + WG key + offsite PBS token; uploaded to hub. Independently verified in host_escrow (demo-felhom-01: key_fingerprint=offsite b0:fe:2a…, identity blob 499B, directive present, created_at=now) with zero knowledge of R. S5 (DR consume) now UNBLOCKED. This re-run also remediated an earlier escrow whose R had leaked into an agent transcript (last-write-wins overwrote it with the clean-R blob). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6