I realize I don't live in their world and none of this whole mishap makes sense if you're looking through the lens of a nominally functional organization. But t

I realize I don't live in their world and none of this whole mishap makes sense if you're looking through the lens of a nominally functional organization. But this explanation still strains belief. 1) If you're actually concerned about phishing or some sort of hack, all the more reason to pick up the phone and hash things out. Arko knew his AWS access was revoked on the 18. You either believe that is an error and get to the bottom of it ASAP, or you step back and accept it for what it is. Resetting the root password silently the next day is like an inconsistent half measure. 2) As you quote, he had a "contractual, paid" relationship with Ruby Central. In contrast to the GitHib repos, there was never ambiguity that RC owned the AWS infrastructure. Therefore I don't buy any confusion about who the legit authority is... You talk to the person signing the checks. I understand this implication about some sort of internal coup, but the actions do not seem consistent with that being a serious belief at the time either.