id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	desk	legacy_ref
61	FOUNDER-TIER service credential rotation overdue since 2019 — no one holds the tier	People & Places	M. Ross (Infrastructure)	The FOUNDER-TIER service credential on the registry directory — the top-level account that provisions and consolidates corporate identities — was diarised for rotation in 2019 and never rotated. The catch: rotating FOUNDER-TIER requires FOUNDER-TIER, and no current member of staff holds it. The tier sits above BUILTIN\LocalOperator and the cached entitlements this console falls back to, so the degraded session cannot even see it, let alone act on it. The credential is years past its rotation window. Nobody can rotate it and nobody can revoke it.	fault	ON HOLD	P1		Registry Services / PKI					Estate & Systems	RS-13355