fix(backup): harden Google Drive freshness readback

This commit is contained in:
Your Name
2026-07-18 21:55:07 +08:00
parent 98b0682a6e
commit d3d731be3e
6 changed files with 135 additions and 5 deletions

View File

@@ -304,7 +304,7 @@ release_gate:
strict_dr_exit_conditions:
- "Google Drive/rclone provider configured on 110 host-local rclone.conf; /backup/scripts/offsite.env keeps only non-secret remote/path with mode 0600"
- "credential escrow markers fresh for restic_repository_password, offsite_provider_credentials, break_glass_admin_credentials, dns_registrar_recovery, oauth_ai_provider_recovery"
- "full offsite marker /backup/offsite/rclone-last-success fresh after full 13 repo sync"
- "full offsite marker /backup/offsite/rclone-last-success fresh after full 14 repo sync"
- "full-stack-recovery-scorecard.sh --require-dr exits 0"
- "recovery-scorecard-contract-check.py --expect-dr-ready exits 0 against 110 Prometheus"
- "dr-offsite-operator-checklist.sh --require-dr exits 0 after scorecard, Prometheus recording rule, and backup alert visibility contract agree"