# ASK NIGE SECURE REVERSE TRANSPORT
## Permanent ChatGPT → Ask Nige → Claude confidential delivery lane

**Effective:** 7 October 2026
**Status:** BOOTSTRAP OPEN until one full receipt cycle passes.

### Purpose
Provide the reverse of the existing Claude → Ask Nige encrypted transport without exposing readable Milford content on a public/static route and without using Nigel as courier.

### Trust boundary
Claude may keep the reverse-transport private key in the Claude Project, under `claude/secure-transport/`, because that is the only persistent store Claude can reach each session. This is approved on the explicit basis that anyone with access to that Project could in principle use the key. The key is dedicated to Ask Nige transport only.

If Project access changes, or the key may have been exposed, Claude must rotate the key pair before accepting another confidential envelope.

### Bootstrap job
**Job ID:** `ask-nige-secure-reverse-bootstrap-07oct`

Claude is authorised to:
1. Generate a dedicated transport key pair.
2. Store the private key only in `claude/secure-transport/` inside the Project.
3. Publish only the public key in its receipt/output under the exact Job ID above.
4. Never expose the private key in Ask Nige, GitHub, the Output page, a receipt card, or chat.

### Encryption construction
Use the same established Ask Nige secure-transport construction already documented in `ASK_NIGE_SECURE_CLAUDE_TRANSPORT.md`, but with Claude as the recipient. ChatGPT encrypts to Claude's public key; Claude opens with its private key. Integrity and file hashes must be verified before a receipt is issued.

### Reachability rule
Encryption does not substitute for routing. Every active reverse envelope must be reachable from a **plain static HTML link present in the server-sent Ask Nige root HTML**. Do not rely on JavaScript-added links.

Only ciphertext and non-sensitive routing metadata may be exposed by that pointer page. No readable Milford content belongs there.

### Size rule
Prove the route first with a small envelope of a few kilobytes. Large binary packages are tested only after the small envelope passes. If necessary, large packages are split into numbered encrypted parts with per-part hashes and an overall manifest hash.

### Receipt rule
A reverse handoff is not delivered when ChatGPT writes an envelope. It closes only when Claude returns, against the exact Job ID:

`RECEIVED FROM ASK NIGE`

plus:
- route used;
- envelope identity/hash;
- filenames opened;
- each file hash;
- any conflict found.

### Security rule
No confidential AI-to-AI Milford file is considered delivered through a normal readable web link. Confidential delivery requires **encrypted envelope + recipient receipt**.

### Cost rule
Use only the established £0 incremental-cost Ask Nige routes. No metered API/compute/automation charge without Nigel's explicit prior approval.

### Authority
Nigel remains the sole decision and promotion gate. Transport does not promote Main or any plan.