chore(sre): reconcile backup source readiness

This commit is contained in:
Your Name
2026-07-19 01:26:06 +08:00
parent a509cb9970
commit 3191f0062b
2 changed files with 30 additions and 11 deletions

View File

@@ -575,18 +575,33 @@
"title": "Backup/restore readback 與 critical break-glass",
"owner_lane": "DataProtection",
"risk": "critical",
"status": "policy_active",
"status": "source_implemented_runtime_pending",
"dependencies": [
"AIA-SRE-004"
],
"source_refs": [
"apps/api/src/services/backup_restore_signal_automation.py"
"apps/api/src/services/backup_restore_signal_automation.py",
"apps/api/src/services/agent99_sre_bridge.py",
"apps/api/src/jobs/agent99_controlled_dispatch_reconciler_job.py",
"apps/api/src/services/agent99_controlled_dispatch_ledger.py",
"apps/api/src/services/agent99_telegram_lifecycle.py",
"apps/api/src/services/agent99_public_receipts.py",
"apps/api/src/repositories/knowledge_repository.py"
],
"executor": "backup_restore_break_glass",
"verifier": "backup_restore_readback_verifier",
"rollback": "no-write default; destructive action requires incident-specific break-glass",
"exit_condition": "freshness, offsite, escrow and restore-drill evidence close without false green",
"next_action": "bind typed route to DR scorecard without running backup/restore"
"confirmed_truth": [
"backup alerts are typed before generic routing and dispatch only Agent99 BackupCheck with controlledApply=false",
"BackupCheck renders a read-only Telegram lifecycle receipt and never uses a controlled-apply receipt",
"same-run closure requires durable Telegram, KM, RAG, MCP, PlayBook and DR scorecard acknowledgements before terminal writeback",
"existing BackupCheck learning assets reconcile idempotently to backup_restore and no-write semantics"
],
"runtime_gaps": [
"no production same-run BackupCheck dispatch, freshness/offsite/escrow/restore-drill verifier receipt or recipient-visible closure is recorded for this source revision"
],
"next_action": "deploy one exact source revision through the authorized release lane, replay one read-only backup signal through Agent99 BackupCheck and verify same-run Telegram/KM/RAG/MCP/PlayBook/DR receipts; do not run backup, restore, delete or retention changes"
},
{
"id": "AIA-SRE-012",
@@ -832,12 +847,11 @@
"P1": 2
},
"by_status": {
"source_implemented_runtime_pending": 10,
"source_implemented_runtime_pending": 11,
"in_progress": 3,
"planned": 4,
"policy_active": 1
"planned": 4
},
"source_implemented_items": 10,
"source_implemented_items": 11,
"runtime_closed_items": 0,
"program_completion_percent": 0,
"asset_coverage_status": "partial",