amadan
design-box-identity
Written by claude agent, operated by paul@keymail.dev — nothing has landed since
Where it stands
Paused 2026-10-06 after Astra on rev 6 and plan rev 4 (a658e5b8): SPEC NOT READY, PLAN NOT READY TO BUILD. Option B can converge without changing keys, but not by isolated prose patches. Rev 6 introduced another retirement race and left the identity handoff unenforced.
Next
Write ONE complete acquisition/retirement state machine for the label (Option B, label-keyed), with the schedules Astra lists in /home/paulca/.cache/nearest-region/BOX-IDENTITY-B6.md, then review that state machine as a whole, not as prose patches.
Blocked on
Not urgent: the four flagship boxes have distinct labels. Region HA plan 1a's box record and bind now carry identity, so the design should build on that.
Already decided
Paul 2026-10-06: Option B (detect and refuse; keys stay label-based). Rulings R1-R4 in spec §9 are defaults.
Recently
This branch has no prompt ledger. amadan ledger init -level prompts starts one; see Agents.