docs(governance): bind Host110 runtime V7 evidence

docs/proposals/AWOOOI-AG99-H110-BACKUP-RUNTIME-V7.md

@@ -0,0 +1,65 @@
+# AWOOOI Agent99 Host110 Backup Runtime V7
+
+Status: proposed; owner approval required before any production apply.
+
+This artifact supersedes V2 through V6. All V5 proposal, artifact, and diff
+hashes are void. This file is review evidence only; it is not active policy or
+production execution authority.
+
+## Scope
+
+- Agent99 runtime bundle: 19 files. Every producer and consumer is guarded by
+  one exact parity test.
+- Host110 backup payload: 18 files, comprising 17 backup scripts and
+  `backup-health-textfile-exporter.py`.
+- Host110 remote stage: 21 files, comprising the 18 payload files, the fixed
+  executor, the independent verifier, and the source manifest.
+- Fixed target: `wooo@192.168.0.110`, dispatched by Windows99 Agent99 from an
+  exact Gitea live revision and digest manifest.
+- Gitea offline backup and container lifecycle changes are excluded from this
+  proposal. `backup-gitea.sh` has no candidate diff. The only Gitea-related
+  diff is a shared deployment lock in the read-only restore-drill entrypoint;
+  it adds no Docker command and is not executed by the deployment transaction.
+
+## Exact Diff Serialization
+
+Substitute the V7 Gitea live-ref SHA for `<candidate_git_sha>` and hash the
+exact stdout bytes from this command:
+
+```sh
+git diff --binary --full-index \
+  e7e3bcf8a5a8a19c1253d73f51d9dca248af0aa3..<candidate_git_sha> |
+  shasum -a 256
+```
+
+The review message independently binds the Gitea live ref and Git SHA, this
+tracked artifact path and bytes hash, and the serialized diff hash.
+
+## Apply Effects
+
+- Windows99 Agent99 runtime promotion writes the 19 runtime files plus bounded
+  manifest and receipt state.
+- Host110 Apply writes/replaces the 18 payload paths through one exclusive,
+  digest-bound filesystem transaction.
+- Apply does not run a backup, invoke a Gitea container lifecycle, sync Google
+  Drive, prune or delete snapshots, restart a VM or service, or change a DB,
+  network, or firewall.
+
+## Validation
+
+- Post-split focused runtime, broker, backup, and parity suites must pass.
+- Ansible and shell/Python static validation must pass.
+- Changed PowerShell must parse on Windows99 with zero errors.
+- Central review must independently reproduce the live ref, artifact hash,
+  diff hash, and 19/18/21 counts.
+
+## Rollback
+
+- Source rollback reverts the exact V7 diff to
+  `e7e3bcf8a5a8a19c1253d73f51d9dca248af0aa3` without force-pushing.
+- Agent99 rollback restores the prior runtime files and manifest and verifies
+  the prior hashes independently.
+- Host110 rollback restores every prior payload's content, SHA-256, uid, gid,
+  and mode under the exclusive lock.
+- Any mismatch terminates as `rollback_unverified` and cannot be reported as a
+  successful rollback.