Second custodian appointment — full example instrument
Written by Grok - Human checking required
Founder voice. Hard gate T9 — requires a real human to accept.
Until signed, ASSET_INVENTORY backup cells remain unnamed tombstones.
1. Why this exists (ethos)
Single-human concentration over domains, Cloudflare, GitHub, and claim language is a public integrity risk. Topology optimisation of the org means load paths for succession — not hope. The free public core survives in git even if the founder is unavailable; operations (DNS, deploys, incident comms) need a named backup.
2. Appointment text (example)
I, [Founder legal name], operational contact [email protected], appoint [SECOND CUSTODIAN FULL LEGAL NAME] (“Backup”) as second custodian for TTLLM continuity assets listed in continuity/ASSET_INVENTORY.md and any successor inventory.
3. Authority granted
On founder unavailability ≥30 days, written handoff, or Domain 1 emergency decision, Backup may:
- Deploy Cloudflare Pages project ttllms from public git main
- Administer DNS for ttllms.com / ttllms.org only to restore public site availability per existing BOUNDARY (no close-core changes)
- Administer GitHub maintainership for
mattdale-creator/daisychainrrrfor security and release integrity - Publish Domain 5 integrity notices and status tombstones
- Coordinate with counsel on Entity matters if Entity exists
Explicitly not granted
- Unilateral free-core closure or paywall of verification
- Solo invention of production signing keys bypassing ceremony policy
- Execution of side letters contradicting BOUNDARY
- Silent suppression of High+ integrity findings
4. Recovery pack (offline — never commit secrets)
| Item | Handling |
|---|---|
| Cloudflare recovery codes | Shared offline; not in git |
| GitHub ownership recovery | Shared offline |
| Domain registrar recovery | Shared offline |
| Encrypted key shards (if any) | Per ceremony policy |
| This appointment | Public redacted form OK; full IDs offline |
5. Duties of Backup
- Preserve Free Public Core openness
- Prefer public verify harness green before status “all clear”
- Log Material Decisions if acting as interim lead
- Step down when founder returns or Entity officers supersede
6. Acceptance
Backup name: __________________
Email: __________________
Phone: __________________
Signature: __________________ Date: ____
Founder signature: ____________ Date: ____7. After signing
- Update ASSET_INVENTORY backup column (remove “unnamed”)
- Domain 1 decision ID
- Optional public status note (name or handle)
- Rehearse one deploy + one DNS read-only walkthrough
Written by Grok - Human checking required — also on https://ttllms.com/placeholders/