# Own a Session-Scoped BYOC Account Bootstrap

> Status: superseded by ADR 0030. This was accepted under the earlier
> same-account model and is retained only as decision history.

CP9 creates and owns a session-scoped semantic equivalent of the production BYOC account bootstrap in the distinct BYOC customer account instead of requiring foreign prerequisites or executing the fixed-name production CloudFormation stacks. The bootstrap creates session-derived IAM roles, policies, cross-account trust, provider identities, ECR/image-sync resources, TiDB DNS, and PCA with the session ownership and cleanup contract; DPM configuration resolves those customer-account role and registry names. O11Y bootstrap resources are excluded from the core-lifecycle slice, while the real BYOC dataplane lifecycle remains responsible for its VPC and EKS rather than consuming hand-created substitutes. Activation evidence maps each session resource to its production account-setup purpose and must prove the control-plane-to-customer assume-role path. Normal `cp9 destroy` owns exact cleanup in both accounts, and CP9 never adopts account-global production stack or role names.