{ "acceptance_candidates": [ { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_all_orchestrator", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "gitea", "momo", "harbor", "awoooi", "langfuse", "monitoring", "signoz", "open-webui", "clawbot" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_orchestrator", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_all_orchestrator", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_all_orchestrator", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_common_restic_retention", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "RESTIC_PASSWORD_FILE", "B2 metadata", "KEEP_DAILY=30", "KEEP_WEEKLY=12", "KEEP_MONTHLY=24" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_common_policy", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_common_restic_retention", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_common_restic_retention", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_gitea_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Gitea DB", "repositories", "app.ini redaction boundary" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_gitea_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_gitea_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_momo_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "MOMO PostgreSQL", "188 database path" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_momo_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_momo_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_harbor_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Harbor registry", "Harbor DB", "image registry recovery" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_harbor_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_harbor_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "awoooi_prod", "awoooi_dev", "k3s datastore" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_awoooi_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_awoooi_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_frequent_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "awoooi_prod", "6h RPO", "latest-only interaction" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_awoooi_frequent_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_awoooi_frequent_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_langfuse_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Langfuse DB", "AI trace evidence" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_langfuse_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_langfuse_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_monitoring_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Prometheus", "Grafana", "Alertmanager" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_monitoring_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_monitoring_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_signoz_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "SigNoz ClickHouse", "SigNoz SQLite" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_signoz_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_signoz_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_open_webui_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Open-WebUI volume", "LLM conversation data" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_open_webui_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_open_webui_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_clawbot_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "ClawBot Redis", "agent state cache" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_clawbot_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_clawbot_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_sentry_service_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Sentry", "ClickHouse / Postgres / Redis dependency boundary" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_sentry_service_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_sentry_service_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_ai_artifacts_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "AI artifacts", "model / evaluation outputs" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_ai_artifacts_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_ai_artifacts_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_public_routes_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "public routes", "Nginx route reconstruction", "frontend/API smoke evidence" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "service_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_public_routes_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_public_routes_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:config_backup_capture", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "systemd", "docker", "nginx", "cron", "k8s", "host configs" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "config_backup_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:config_backup_capture", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "config_backup_capture", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_reporter", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "freshness", "failure", "integrity", "restore drill", "offsite", "escrow" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_status_reporter", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_status_reporter", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_status_reporter", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_integrity_check", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "restic check", "read-data subset", "integrity evidence" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "integrity_check_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_integrity_check", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_integrity_check", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:latest_only_retention_enforcer", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "keep latest", "local delete", "retention marker" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "retention_enforcer", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:latest_only_retention_enforcer", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "latest_only_retention_enforcer", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_sync_controller", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "13 repos", "rclone sync", "remote delete", "success markers" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_sync_controller", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_sync_controller", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_sync_controller", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_full_sync_verifier", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "remote repo count", "latest-only evidence", "textfile metrics" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_verifier", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_full_sync_verifier", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_full_sync_verifier", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_readiness_gate", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "status", "dry-run-small", "pre-full-sync", "escrow markers" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_readiness_gate", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_readiness_gate", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_readiness_gate", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_evidence_report", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "script presence", "offsite marker", "escrow marker", "redacted output" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_escrow_report", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_escrow_evidence_report", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_escrow_evidence_report", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:credential_escrow_marker", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "restic password", "offsite provider", "break-glass admin", "DNS recovery", "OAuth / AI provider recovery" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "credential_escrow_marker", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:credential_escrow_marker", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "credential_escrow_marker", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_rclone_config", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "rclone remote", "Google Drive", "offsite.env metadata" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_rclone_config", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_rclone_config", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_rclone_config", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_b2_config", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Backblaze B2 metadata", "offsite env", "fallback provider" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_b2_config", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_b2_config", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_b2_config", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_health_textfile_exporter", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "freshness metrics", "restore drill metrics", "offsite metrics", "escrow metrics" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_health_exporter", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_health_textfile_exporter", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_health_textfile_exporter", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_cronjob", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Velero restore dry-run", "weekly schedule", "textfile metrics" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "velero_restore_cronjob", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:velero_restore_test_cronjob", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "velero_restore_test_cronjob", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_script_configmap", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "restore dry-run script", "13-digit textfile timestamp risk", "Prometheus textfile" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "velero_restore_script_configmap", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:velero_restore_test_script_configmap", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "velero_restore_test_script_configmap", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_standalone_restore_test_script", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "restore dry-run", "Prometheus textfile seconds timestamp", "failure metric" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "velero_restore_standalone_script", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:velero_standalone_restore_test_script", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "velero_standalone_restore_test_script", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_credentials_manifest", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "MinIO credential names", "placeholder values", "External Secrets / Sealed Secrets recommendation" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "velero_credentials_manifest", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:velero_credentials_manifest", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "velero_credentials_manifest", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_install_manifest", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "Velero Deployment", "cluster-admin binding", "MinIO s3Url", "backup storage location" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "velero_install_manifest", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:velero_install_manifest", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "velero_install_manifest", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": true }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_alert_rules", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "BackupRestoreTestFailed", "Velero freshness", "offsite freshness", "restore stale" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_restore_alert_rules", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_restore_alert_rules", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_restore_alert_rules", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_dr_readiness_contract", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "readiness matrix", "blocked targets", "restore drill status" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "dr_readiness_contract", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_dr_readiness_contract", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_dr_readiness_contract", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_drill_approval_template", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "database restore", "configuration restore", "credential escrow", "K8s restore", "observability restore" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "restore_drill_approval_template", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_restore_drill_approval_template", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_restore_drill_approval_template", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_readiness_contract", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "offsite_rclone_full_sync", "credential_escrow_markers", "velero_k8s_resources" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "offsite_escrow_readiness_contract", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:offsite_escrow_readiness_contract", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "offsite_escrow_readiness_contract", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_runbook", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "110 backup center", "latest-only", "Google Drive / rclone", "credential escrow", "120 blocker" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "backup_status_runbook", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:backup_status_runbook", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_status_runbook", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false }, { "acceptance_candidate_id": "backup_restore_owner_response_acceptance:cold_start_sop", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", "backup_dependency_map_accepted": false, "backup_dependency_map_ref": null, "backup_health_no_false_green_accepted": false, "backup_health_no_false_green_ref": null, "backup_run_authorized": false, "backup_scope": [ "cold start", "backup-all", "sync-offsite", "restore guard", "schedules" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "config_kind": "cold_start_sop", "control_tier": "C0", "credential_escrow_accepted": false, "credential_escrow_evidence_ref": null, "credential_escrow_marker_write_authorized": false, "credential_recovery_drill_accepted": false, "credential_recovery_drill_ref": null, "data_classification_accepted": false, "data_classification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "freshness_slo_accepted": false, "freshness_slo_ref": null, "host_write_authorized": false, "kubectl_action_authorized": false, "latest_backup_status_ref": null, "live_evidence_received": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "offsite_remote_delete_authorized": false, "offsite_sync_accepted": false, "offsite_sync_authorized": false, "offsite_sync_evidence_ref": null, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_credential_value", "request_supplement", "ready_for_restore_review", "owner_review_only_update", "restore_recovery_backfill_required", "remote_delete_retention_review_required", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "rclone_config_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "remote_delete_guard_accepted": false, "remote_delete_guard_ref": null, "request_id": "backup_restore_owner_request:cold_start_sop", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "restic_prune_authorized": false, "restore_drill_accepted": false, "restore_drill_plan_ref": null, "restore_observer_stop_condition_accepted": false, "restore_observer_stop_condition_ref": null, "restore_run_authorized": false, "restore_target_isolation_accepted": false, "restore_target_isolation_ref": null, "retention_change_accepted": false, "retention_change_authorized": false, "retention_owner": "pending_owner_response", "retention_runway_accepted": false, "retention_runway_ref": null, "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_surface", "redacted_refs_only", "secret_value_absent", "backup_status_ref_shape", "restore_drill_plan_present", "offsite_sync_ref_not_payload", "credential_escrow_metadata_only", "retention_owner_present", "maintenance_window_present", "rollback_owner_present", "counts_transition_safe", "freshness_slo_present", "restore_target_isolation_present", "backup_dependency_map_present", "data_classification_present", "remote_delete_guard_present", "retention_runway_present", "restore_observer_stop_condition_present", "credential_recovery_drill_metadata_only", "backup_health_no_false_green_reviewed" ], "reviewer_outcome": "waiting_owner_response", "rollback_owner": "pending_owner_response", "rollback_owner_accepted": false, "runtime_gate": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "cold_start_sop", "validation_plan": "pending_owner_response", "validation_plan_accepted": false, "velero_backup_authorized": false, "velero_restore_authorized": false, "write_capable_surface": false } ], "acceptance_fields": [ "acceptance_candidate_id", "request_id", "surface_id", "config_kind", "backup_scope", "control_tier", "write_capable_surface", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan_ref", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref", "retention_owner", "maintenance_window", "rollback_owner", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "blocked_actions": [ "backup_run", "restore_run", "restore_drill", "offsite_sync", "offsite_remote_delete", "credential_escrow_marker_write", "retention_change", "restic_prune", "rclone_config", "velero_restore", "velero_backup", "kubectl_action", "ssh_read", "ssh_write", "secret_value_collection", "host_write", "active_scan", "runtime_gate_open", "raw_backup_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", "accept_backup_without_freshness_slo", "accept_restore_without_isolated_target", "accept_offsite_without_remote_delete_guard", "accept_retention_without_runway", "accept_credential_recovery_without_non_secret_proof", "accept_backup_health_false_green", "skip_dependency_map_review", "skip_data_classification_review", "store_raw_restore_payload", "add_action_button" ], "execution_boundaries": { "action_buttons_allowed": false, "active_scan_authorized": false, "backup_run_authorized": false, "credential_escrow_marker_write_authorized": false, "host_write_authorized": false, "kubectl_action_authorized": false, "live_evidence_received": false, "not_authorization": true, "offsite_remote_delete_authorized": false, "offsite_sync_authorized": false, "owner_response_accepted": false, "rclone_config_authorized": false, "request_dispatch_authorized": false, "restic_prune_authorized": false, "restore_drill_authorized": false, "restore_run_authorized": false, "retention_change_authorized": false, "runtime_execution_authorized": false, "secret_value_collection_allowed": false, "ssh_read_authorized": false, "ssh_write_authorized": false, "velero_backup_authorized": false, "velero_restore_authorized": false }, "generated_at": "2026-06-15T15:35:00+08:00", "git_commit": "51de5fe6", "next_steps": [ "等待 owner response；未收到前不得更新 accepted count。", "收到回覆後先走 raw payload / secret / scope / restore / retention / freshness / isolation / remote delete guard / evidence ref 檢查，不合格即隔離、拒收或補件。", "metadata 合格也只能進 restore / retention reviewer review；backup、restore、offsite sync、escrow marker、retention change 與 production write 仍需獨立人工批准。" ], "outcome_lanes": [ { "lane_id": "waiting_owner_response", "meaning": "尚未收到 owner response；所有 accepted / runtime count 維持 0。" }, { "lane_id": "quarantine_raw_payload", "meaning": "收到 raw backup listing、secret、rclone config 或不可保存內容時只能隔離。" }, { "lane_id": "reject_secret_or_credential_value", "meaning": "出現 secret value、credential derivative 或未脫敏 payload 時直接拒收。" }, { "lane_id": "request_supplement", "meaning": "欄位不足、scope 不清、restore / retention owner 缺失時要求補件。" }, { "lane_id": "ready_for_restore_review", "meaning": "metadata 合格後，只能進 restore / retention reviewer review。" }, { "lane_id": "owner_review_only_update", "meaning": "只允許更新只讀 owner review ledger，不得執行 backup / restore / offsite / retention。" }, { "lane_id": "restore_recovery_backfill_required", "meaning": "restore / cold-start / incident recovery 資料不足時只要求補件，不得演練或寫 production。" }, { "lane_id": "remote_delete_retention_review_required", "meaning": "offsite remote delete、latest-only 與 restic prune 必須進 retention reviewer review。" }, { "lane_id": "waiting_runtime_gate", "meaning": "即使 owner response accepted，runtime gate 仍等待獨立人工批准。" } ], "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "latest_backup_status_ref", "restore_drill_plan", "offsite_sync_evidence_ref", "credential_escrow_evidence_ref", "maintenance_window", "rollback_owner", "validation_plan", "retention_owner", "followup_owner", "freshness_slo_ref", "restore_target_isolation_ref", "backup_dependency_map_ref", "data_classification_ref", "remote_delete_guard_ref", "retention_runway_ref", "restore_observer_stop_condition_ref", "credential_recovery_drill_ref", "backup_health_no_false_green_ref" ], "reviewer_checks": [ { "check_id": "owner_identity_present", "instruction": "owner role / team 必須可追溯。" }, { "check_id": "decision_reason_present", "instruction": "decision 與 decision reason 必須同時存在。" }, { "check_id": "affected_scope_matches_surface", "instruction": "affected scope 必須能對回 committed surface_id。" }, { "check_id": "redacted_refs_only", "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。" }, { "check_id": "secret_value_absent", "instruction": "不得出現 token、private key、seed、rclone config、kubeconfig 或 credential derivative。" }, { "check_id": "backup_status_ref_shape", "instruction": "latest backup status 只能是 owner-provided redacted ref，不得讀 live backup store。" }, { "check_id": "restore_drill_plan_present", "instruction": "restore drill 必須是 plan / approval package，不得是執行請求。" }, { "check_id": "offsite_sync_ref_not_payload", "instruction": "offsite sync evidence 只能是 ref，不得貼 raw listing 或 secret path。" }, { "check_id": "credential_escrow_metadata_only", "instruction": "credential escrow 只能是 metadata / marker ref，不得包含 value。" }, { "check_id": "retention_owner_present", "instruction": "retention owner 與 retention decision 必須可追溯。" }, { "check_id": "maintenance_window_present", "instruction": "任何未來 backup / restore / prune / sync 都必須另有維護窗口。" }, { "check_id": "rollback_owner_present", "instruction": "rollback owner 與 rollback ref 必須存在。" }, { "check_id": "counts_transition_safe", "instruction": "只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate。" }, { "check_id": "freshness_slo_present", "instruction": "必須有備份 freshness SLO / RPO ref；不得只用 latest 字樣取代。" }, { "check_id": "restore_target_isolation_present", "instruction": "restore drill 必須有隔離目標或明確 no-production-write 邊界。" }, { "check_id": "backup_dependency_map_present", "instruction": "必須列出資料庫、物件儲存、repo、配置、憑證與告警的復原依賴圖 ref。" }, { "check_id": "data_classification_present", "instruction": "必須標示備份集資料分級；不得要求 raw customer data、payload 或 unredacted listing。" }, { "check_id": "remote_delete_guard_present", "instruction": "offsite sync / latest-only policy 必須有 remote delete guard 與 owner ref。" }, { "check_id": "retention_runway_present", "instruction": "retention / prune 必須有可恢復窗口、runway 與撤回條件。" }, { "check_id": "restore_observer_stop_condition_present", "instruction": "restore drill 必須有 observer、stop condition 與 rollback owner。" }, { "check_id": "credential_recovery_drill_metadata_only", "instruction": "credential recovery 只能收 non-secret proof / evidence id，不得收 value、hash、seed 或 recovery code。" }, { "check_id": "backup_health_no_false_green_reviewed", "instruction": "backup health / textfile / alert evidence 必須防止 false-green，不能只看單一 healthy。" } ], "schema_version": "backup_restore_owner_response_acceptance_v1", "source_inventory_schema_version": "backup_restore_escrow_inventory_v1", "source_inventory_status": "repo_only_inventory_ready", "source_owner_request_schema_version": "backup_restore_owner_request_draft_v1", "source_owner_request_status": "owner_request_draft_ready_not_dispatched", "status": "owner_response_acceptance_ledger_ready_no_runtime_action", "summary": { "acceptance_candidate_count": 38, "acceptance_field_count": 33, "action_button_count": 0, "active_scan_authorized_count": 0, "backup_dependency_map_accepted_count": 0, "backup_health_no_false_green_accepted_count": 0, "backup_run_authorized_count": 0, "blocked_action_count": 31, "credential_escrow_accepted_count": 0, "credential_escrow_marker_write_authorized_count": 0, "credential_recovery_drill_accepted_count": 0, "data_classification_accepted_count": 0, "freshness_slo_accepted_count": 0, "host_write_authorized_count": 0, "kubectl_action_authorized_count": 0, "live_evidence_received_count": 0, "live_evidence_required_candidate_count": 38, "maintenance_window_accepted_count": 0, "offsite_remote_delete_authorized_count": 0, "offsite_sync_accepted_count": 0, "offsite_sync_authorized_count": 0, "outcome_lane_count": 9, "owner_response_accepted_count": 0, "owner_response_quarantined_count": 0, "owner_response_received_count": 0, "owner_response_rejected_count": 0, "rclone_config_authorized_count": 0, "recipient_confirmed_count": 0, "remote_delete_guard_accepted_count": 0, "request_sent_count": 0, "required_owner_field_count": 23, "restic_prune_authorized_count": 0, "restore_drill_accepted_count": 0, "restore_observer_stop_condition_accepted_count": 0, "restore_run_authorized_count": 0, "restore_target_isolation_accepted_count": 0, "retention_change_accepted_count": 0, "retention_change_authorized_count": 0, "retention_runway_accepted_count": 0, "reviewer_check_count": 22, "rollback_owner_accepted_count": 0, "runtime_gate_count": 0, "secret_value_collection_allowed_count": 0, "source_request_draft_count": 38, "source_surface_count": 38, "ssh_read_authorized_count": 0, "ssh_write_authorized_count": 0, "supplement_requested_count": 0, "validation_plan_accepted_count": 0, "velero_backup_authorized_count": 0, "velero_restore_authorized_count": 0, "write_capable_acceptance_candidate_count": 27 } }