It's true that the only honest solutions for root-key rotation are going to all be shaped either as "backups i have somewhere else" or "here's a list of other keys I use if you need them" -- shamir so...
Agreed. And the thing both approaches share is that they assume a root you still control. Backups recover the same root, delegation hands off from a working one. Neither helps once the root itself is gone, because there’s nothing trusted left to sign the handover. That’s the part we just design out, our root lives inside a secure element and never leaves it, so the moment that forces a rotation basically can’t happen.
1
