awoooi/docs/security/backup-restore-owner-response-acceptance.snapshot.json

{
  "acceptance_candidates": [
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_all_orchestrator",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "gitea",
        "momo",
        "harbor",
        "awoooi",
        "langfuse",
        "monitoring",
        "signoz",
        "open-webui",
        "clawbot"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_orchestrator",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_all_orchestrator",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_all_orchestrator",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_common_restic_retention",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "RESTIC_PASSWORD_FILE",
        "B2 metadata",
        "KEEP_DAILY=30",
        "KEEP_WEEKLY=12",
        "KEEP_MONTHLY=24"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_common_policy",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_common_restic_retention",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_common_restic_retention",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_gitea_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Gitea DB",
        "repositories",
        "app.ini redaction boundary"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_gitea_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_gitea_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_momo_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "MOMO PostgreSQL",
        "188 database path"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_momo_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_momo_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_harbor_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Harbor registry",
        "Harbor DB",
        "image registry recovery"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_harbor_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_harbor_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "awoooi_prod",
        "awoooi_dev",
        "k3s datastore"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_awoooi_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_awoooi_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_frequent_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "awoooi_prod",
        "6h RPO",
        "latest-only interaction"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_awoooi_frequent_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_awoooi_frequent_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_langfuse_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Langfuse DB",
        "AI trace evidence"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_langfuse_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_langfuse_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_monitoring_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Prometheus",
        "Grafana",
        "Alertmanager"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_monitoring_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_monitoring_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_signoz_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "SigNoz ClickHouse",
        "SigNoz SQLite"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_signoz_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_signoz_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_open_webui_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Open-WebUI volume",
        "LLM conversation data"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_open_webui_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_open_webui_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_clawbot_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "ClawBot Redis",
        "agent state cache"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_clawbot_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_clawbot_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_sentry_service_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Sentry",
        "ClickHouse / Postgres / Redis dependency boundary"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_sentry_service_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_sentry_service_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_ai_artifacts_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "AI artifacts",
        "model / evaluation outputs"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_ai_artifacts_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_ai_artifacts_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_public_routes_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "public routes",
        "Nginx route reconstruction",
        "frontend/API smoke evidence"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_public_routes_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_public_routes_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:config_backup_capture",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "systemd",
        "docker",
        "nginx",
        "cron",
        "k8s",
        "host configs"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "config_backup_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:config_backup_capture",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "config_backup_capture",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_reporter",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "freshness",
        "failure",
        "integrity",
        "restore drill",
        "offsite",
        "escrow"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_status_reporter",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_status_reporter",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_status_reporter",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_integrity_check",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restic check",
        "read-data subset",
        "integrity evidence"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "integrity_check_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_integrity_check",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_integrity_check",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:latest_only_retention_enforcer",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "keep latest",
        "local delete",
        "retention marker"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "retention_enforcer",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:latest_only_retention_enforcer",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "latest_only_retention_enforcer",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_sync_controller",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "13 repos",
        "rclone sync",
        "remote delete",
        "success markers"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_sync_controller",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_sync_controller",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_sync_controller",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_full_sync_verifier",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "remote repo count",
        "latest-only evidence",
        "textfile metrics"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_verifier",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_full_sync_verifier",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_full_sync_verifier",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_readiness_gate",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "status",
        "dry-run-small",
        "pre-full-sync",
        "escrow markers"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_readiness_gate",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_readiness_gate",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_readiness_gate",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_evidence_report",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "script presence",
        "offsite marker",
        "escrow marker",
        "redacted output"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_escrow_report",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_escrow_evidence_report",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_escrow_evidence_report",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:credential_escrow_marker",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restic password",
        "offsite provider",
        "break-glass admin",
        "DNS recovery",
        "OAuth / AI provider recovery"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "credential_escrow_marker",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:credential_escrow_marker",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "credential_escrow_marker",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_rclone_config",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "rclone remote",
        "Google Drive",
        "offsite.env metadata"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_rclone_config",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_rclone_config",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_rclone_config",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_b2_config",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Backblaze B2 metadata",
        "offsite env",
        "fallback provider"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_b2_config",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_b2_config",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_b2_config",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_health_textfile_exporter",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "freshness metrics",
        "restore drill metrics",
        "offsite metrics",
        "escrow metrics"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_health_exporter",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_health_textfile_exporter",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_health_textfile_exporter",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_cronjob",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Velero restore dry-run",
        "weekly schedule",
        "textfile metrics"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "velero_restore_cronjob",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:velero_restore_test_cronjob",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "velero_restore_test_cronjob",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_script_configmap",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restore dry-run script",
        "13-digit textfile timestamp risk",
        "Prometheus textfile"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "velero_restore_script_configmap",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:velero_restore_test_script_configmap",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "velero_restore_test_script_configmap",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_standalone_restore_test_script",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restore dry-run",
        "Prometheus textfile seconds timestamp",
        "failure metric"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "velero_restore_standalone_script",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:velero_standalone_restore_test_script",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "velero_standalone_restore_test_script",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_credentials_manifest",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "MinIO credential names",
        "placeholder values",
        "External Secrets / Sealed Secrets recommendation"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "velero_credentials_manifest",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:velero_credentials_manifest",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "velero_credentials_manifest",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_install_manifest",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Velero Deployment",
        "cluster-admin binding",
        "MinIO s3Url",
        "backup storage location"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "velero_install_manifest",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:velero_install_manifest",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "velero_install_manifest",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_alert_rules",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "BackupRestoreTestFailed",
        "Velero freshness",
        "offsite freshness",
        "restore stale"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_restore_alert_rules",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_restore_alert_rules",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_restore_alert_rules",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_dr_readiness_contract",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "readiness matrix",
        "blocked targets",
        "restore drill status"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "dr_readiness_contract",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_dr_readiness_contract",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_dr_readiness_contract",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_drill_approval_template",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "database restore",
        "configuration restore",
        "credential escrow",
        "K8s restore",
        "observability restore"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "restore_drill_approval_template",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_restore_drill_approval_template",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_restore_drill_approval_template",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_readiness_contract",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "offsite_rclone_full_sync",
        "credential_escrow_markers",
        "velero_k8s_resources"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "offsite_escrow_readiness_contract",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:offsite_escrow_readiness_contract",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "offsite_escrow_readiness_contract",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_runbook",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "110 backup center",
        "latest-only",
        "Google Drive / rclone",
        "credential escrow",
        "120 blocker"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "backup_status_runbook",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:backup_status_runbook",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "backup_status_runbook",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "acceptance_candidate_id": "backup_restore_owner_response_acceptance:cold_start_sop",
      "acceptance_fields": [
        "acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "owner_response_ref",
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan_ref",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref",
        "retention_owner",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "affected_scope": "pending_owner_response",
      "backup_dependency_map_accepted": false,
      "backup_dependency_map_ref": null,
      "backup_health_no_false_green_accepted": false,
      "backup_health_no_false_green_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "cold start",
        "backup-all",
        "sync-offsite",
        "restore guard",
        "schedules"
      ],
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "retention_change",
        "restic_prune",
        "rclone_config",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "host_write",
        "active_scan",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "accept_secret_value_evidence",
        "mark_owner_response_accepted_without_reviewer_record",
        "accept_backup_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "store_raw_restore_payload",
        "add_action_button"
      ],
      "config_kind": "cold_start_sop",
      "control_tier": "C0",
      "credential_escrow_accepted": false,
      "credential_escrow_evidence_ref": null,
      "credential_escrow_marker_write_authorized": false,
      "credential_recovery_drill_accepted": false,
      "credential_recovery_drill_ref": null,
      "data_classification_accepted": false,
      "data_classification_ref": null,
      "decision": "pending_owner_response",
      "decision_reason": "pending_owner_response",
      "followup_owner": "pending_owner_response",
      "freshness_slo_accepted": false,
      "freshness_slo_ref": null,
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "latest_backup_status_ref": null,
      "live_evidence_received": false,
      "maintenance_window": "pending_owner_response",
      "maintenance_window_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_sync_accepted": false,
      "offsite_sync_authorized": false,
      "offsite_sync_evidence_ref": null,
      "outcome_lanes": [
        "waiting_owner_response",
        "quarantine_raw_payload",
        "reject_secret_or_credential_value",
        "request_supplement",
        "ready_for_restore_review",
        "owner_review_only_update",
        "restore_recovery_backfill_required",
        "remote_delete_retention_review_required",
        "waiting_runtime_gate"
      ],
      "owner_response_accepted": false,
      "owner_response_quarantined": false,
      "owner_response_received": false,
      "owner_response_ref": null,
      "owner_response_rejected": false,
      "owner_role_or_team": "pending_owner_response",
      "rclone_config_authorized": false,
      "recipient_confirmed": false,
      "redacted_evidence_refs": [],
      "remote_delete_guard_accepted": false,
      "remote_delete_guard_ref": null,
      "request_id": "backup_restore_owner_request:cold_start_sop",
      "request_sent": false,
      "required_owner_fields": [
        "owner_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "redacted_evidence_refs",
        "latest_backup_status_ref",
        "restore_drill_plan",
        "offsite_sync_evidence_ref",
        "credential_escrow_evidence_ref",
        "maintenance_window",
        "rollback_owner",
        "validation_plan",
        "retention_owner",
        "followup_owner",
        "freshness_slo_ref",
        "restore_target_isolation_ref",
        "backup_dependency_map_ref",
        "data_classification_ref",
        "remote_delete_guard_ref",
        "retention_runway_ref",
        "restore_observer_stop_condition_ref",
        "credential_recovery_drill_ref",
        "backup_health_no_false_green_ref"
      ],
      "restic_prune_authorized": false,
      "restore_drill_accepted": false,
      "restore_drill_plan_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_accepted": false,
      "restore_target_isolation_ref": null,
      "retention_change_accepted": false,
      "retention_change_authorized": false,
      "retention_owner": "pending_owner_response",
      "retention_runway_accepted": false,
      "retention_runway_ref": null,
      "reviewer_checks": [
        "owner_identity_present",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "redacted_refs_only",
        "secret_value_absent",
        "backup_status_ref_shape",
        "restore_drill_plan_present",
        "offsite_sync_ref_not_payload",
        "credential_escrow_metadata_only",
        "retention_owner_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "counts_transition_safe",
        "freshness_slo_present",
        "restore_target_isolation_present",
        "backup_dependency_map_present",
        "data_classification_present",
        "remote_delete_guard_present",
        "retention_runway_present",
        "restore_observer_stop_condition_present",
        "credential_recovery_drill_metadata_only",
        "backup_health_no_false_green_reviewed"
      ],
      "reviewer_outcome": "waiting_owner_response",
      "rollback_owner": "pending_owner_response",
      "rollback_owner_accepted": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_owner_response",
      "supplement_requested": false,
      "surface_id": "cold_start_sop",
      "validation_plan": "pending_owner_response",
      "validation_plan_accepted": false,
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    }
  ],
  "acceptance_fields": [
    "acceptance_candidate_id",
    "request_id",
    "surface_id",
    "config_kind",
    "backup_scope",
    "control_tier",
    "write_capable_surface",
    "owner_response_ref",
    "owner_role_or_team",
    "decision",
    "decision_reason",
    "affected_scope",
    "redacted_evidence_refs",
    "latest_backup_status_ref",
    "restore_drill_plan_ref",
    "offsite_sync_evidence_ref",
    "credential_escrow_evidence_ref",
    "freshness_slo_ref",
    "restore_target_isolation_ref",
    "backup_dependency_map_ref",
    "data_classification_ref",
    "remote_delete_guard_ref",
    "retention_runway_ref",
    "restore_observer_stop_condition_ref",
    "credential_recovery_drill_ref",
    "backup_health_no_false_green_ref",
    "retention_owner",
    "maintenance_window",
    "rollback_owner",
    "validation_plan",
    "reviewer_outcome",
    "followup_owner",
    "not_approval"
  ],
  "blocked_actions": [
    "backup_run",
    "restore_run",
    "restore_drill",
    "offsite_sync",
    "offsite_remote_delete",
    "credential_escrow_marker_write",
    "retention_change",
    "restic_prune",
    "rclone_config",
    "velero_restore",
    "velero_backup",
    "kubectl_action",
    "ssh_read",
    "ssh_write",
    "secret_value_collection",
    "host_write",
    "active_scan",
    "runtime_gate_open",
    "raw_backup_payload_storage",
    "accept_secret_value_evidence",
    "mark_owner_response_accepted_without_reviewer_record",
    "accept_backup_without_freshness_slo",
    "accept_restore_without_isolated_target",
    "accept_offsite_without_remote_delete_guard",
    "accept_retention_without_runway",
    "accept_credential_recovery_without_non_secret_proof",
    "accept_backup_health_false_green",
    "skip_dependency_map_review",
    "skip_data_classification_review",
    "store_raw_restore_payload",
    "add_action_button"
  ],
  "execution_boundaries": {
    "action_buttons_allowed": false,
    "active_scan_authorized": false,
    "backup_run_authorized": false,
    "credential_escrow_marker_write_authorized": false,
    "host_write_authorized": false,
    "kubectl_action_authorized": false,
    "live_evidence_received": false,
    "not_authorization": true,
    "offsite_remote_delete_authorized": false,
    "offsite_sync_authorized": false,
    "owner_response_accepted": false,
    "rclone_config_authorized": false,
    "request_dispatch_authorized": false,
    "restic_prune_authorized": false,
    "restore_drill_authorized": false,
    "restore_run_authorized": false,
    "retention_change_authorized": false,
    "runtime_execution_authorized": false,
    "secret_value_collection_allowed": false,
    "ssh_read_authorized": false,
    "ssh_write_authorized": false,
    "velero_backup_authorized": false,
    "velero_restore_authorized": false
  },
  "generated_at": "2026-06-15T15:35:00+08:00",
  "git_commit": "51de5fe6",
  "next_steps": [
    "等待 owner response；未收到前不得更新 accepted count。",
    "收到回覆後先走 raw payload / secret / scope / restore / retention / freshness / isolation / remote delete guard / evidence ref 檢查，不合格即隔離、拒收或補件。",
    "metadata 合格也只能進 restore / retention reviewer review；backup、restore、offsite sync、escrow marker、retention change 與 production write 仍需獨立人工批准。"
  ],
  "outcome_lanes": [
    {
      "lane_id": "waiting_owner_response",
      "meaning": "尚未收到 owner response；所有 accepted / runtime count 維持 0。"
    },
    {
      "lane_id": "quarantine_raw_payload",
      "meaning": "收到 raw backup listing、secret、rclone config 或不可保存內容時只能隔離。"
    },
    {
      "lane_id": "reject_secret_or_credential_value",
      "meaning": "出現 secret value、credential derivative 或未脫敏 payload 時直接拒收。"
    },
    {
      "lane_id": "request_supplement",
      "meaning": "欄位不足、scope 不清、restore / retention owner 缺失時要求補件。"
    },
    {
      "lane_id": "ready_for_restore_review",
      "meaning": "metadata 合格後，只能進 restore / retention reviewer review。"
    },
    {
      "lane_id": "owner_review_only_update",
      "meaning": "只允許更新只讀 owner review ledger，不得執行 backup / restore / offsite / retention。"
    },
    {
      "lane_id": "restore_recovery_backfill_required",
      "meaning": "restore / cold-start / incident recovery 資料不足時只要求補件，不得演練或寫 production。"
    },
    {
      "lane_id": "remote_delete_retention_review_required",
      "meaning": "offsite remote delete、latest-only 與 restic prune 必須進 retention reviewer review。"
    },
    {
      "lane_id": "waiting_runtime_gate",
      "meaning": "即使 owner response accepted，runtime gate 仍等待獨立人工批准。"
    }
  ],
  "required_owner_fields": [
    "owner_role_or_team",
    "decision",
    "decision_reason",
    "affected_scope",
    "redacted_evidence_refs",
    "latest_backup_status_ref",
    "restore_drill_plan",
    "offsite_sync_evidence_ref",
    "credential_escrow_evidence_ref",
    "maintenance_window",
    "rollback_owner",
    "validation_plan",
    "retention_owner",
    "followup_owner",
    "freshness_slo_ref",
    "restore_target_isolation_ref",
    "backup_dependency_map_ref",
    "data_classification_ref",
    "remote_delete_guard_ref",
    "retention_runway_ref",
    "restore_observer_stop_condition_ref",
    "credential_recovery_drill_ref",
    "backup_health_no_false_green_ref"
  ],
  "reviewer_checks": [
    {
      "check_id": "owner_identity_present",
      "instruction": "owner role / team 必須可追溯。"
    },
    {
      "check_id": "decision_reason_present",
      "instruction": "decision 與 decision reason 必須同時存在。"
    },
    {
      "check_id": "affected_scope_matches_surface",
      "instruction": "affected scope 必須能對回 committed surface_id。"
    },
    {
      "check_id": "redacted_refs_only",
      "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。"
    },
    {
      "check_id": "secret_value_absent",
      "instruction": "不得出現 token、private key、seed、rclone config、kubeconfig 或 credential derivative。"
    },
    {
      "check_id": "backup_status_ref_shape",
      "instruction": "latest backup status 只能是 owner-provided redacted ref，不得讀 live backup store。"
    },
    {
      "check_id": "restore_drill_plan_present",
      "instruction": "restore drill 必須是 plan / approval package，不得是執行請求。"
    },
    {
      "check_id": "offsite_sync_ref_not_payload",
      "instruction": "offsite sync evidence 只能是 ref，不得貼 raw listing 或 secret path。"
    },
    {
      "check_id": "credential_escrow_metadata_only",
      "instruction": "credential escrow 只能是 metadata / marker ref，不得包含 value。"
    },
    {
      "check_id": "retention_owner_present",
      "instruction": "retention owner 與 retention decision 必須可追溯。"
    },
    {
      "check_id": "maintenance_window_present",
      "instruction": "任何未來 backup / restore / prune / sync 都必須另有維護窗口。"
    },
    {
      "check_id": "rollback_owner_present",
      "instruction": "rollback owner 與 rollback ref 必須存在。"
    },
    {
      "check_id": "counts_transition_safe",
      "instruction": "只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate。"
    },
    {
      "check_id": "freshness_slo_present",
      "instruction": "必須有備份 freshness SLO / RPO ref；不得只用 latest 字樣取代。"
    },
    {
      "check_id": "restore_target_isolation_present",
      "instruction": "restore drill 必須有隔離目標或明確 no-production-write 邊界。"
    },
    {
      "check_id": "backup_dependency_map_present",
      "instruction": "必須列出資料庫、物件儲存、repo、配置、憑證與告警的復原依賴圖 ref。"
    },
    {
      "check_id": "data_classification_present",
      "instruction": "必須標示備份集資料分級；不得要求 raw customer data、payload 或 unredacted listing。"
    },
    {
      "check_id": "remote_delete_guard_present",
      "instruction": "offsite sync / latest-only policy 必須有 remote delete guard 與 owner ref。"
    },
    {
      "check_id": "retention_runway_present",
      "instruction": "retention / prune 必須有可恢復窗口、runway 與撤回條件。"
    },
    {
      "check_id": "restore_observer_stop_condition_present",
      "instruction": "restore drill 必須有 observer、stop condition 與 rollback owner。"
    },
    {
      "check_id": "credential_recovery_drill_metadata_only",
      "instruction": "credential recovery 只能收 non-secret proof / evidence id，不得收 value、hash、seed 或 recovery code。"
    },
    {
      "check_id": "backup_health_no_false_green_reviewed",
      "instruction": "backup health / textfile / alert evidence 必須防止 false-green，不能只看單一 healthy。"
    }
  ],
  "schema_version": "backup_restore_owner_response_acceptance_v1",
  "source_inventory_schema_version": "backup_restore_escrow_inventory_v1",
  "source_inventory_status": "repo_only_inventory_ready",
  "source_owner_request_schema_version": "backup_restore_owner_request_draft_v1",
  "source_owner_request_status": "owner_request_draft_ready_not_dispatched",
  "status": "owner_response_acceptance_ledger_ready_no_runtime_action",
  "summary": {
    "acceptance_candidate_count": 38,
    "acceptance_field_count": 33,
    "action_button_count": 0,
    "active_scan_authorized_count": 0,
    "backup_dependency_map_accepted_count": 0,
    "backup_health_no_false_green_accepted_count": 0,
    "backup_run_authorized_count": 0,
    "blocked_action_count": 31,
    "credential_escrow_accepted_count": 0,
    "credential_escrow_marker_write_authorized_count": 0,
    "credential_recovery_drill_accepted_count": 0,
    "data_classification_accepted_count": 0,
    "freshness_slo_accepted_count": 0,
    "host_write_authorized_count": 0,
    "kubectl_action_authorized_count": 0,
    "live_evidence_received_count": 0,
    "live_evidence_required_candidate_count": 38,
    "maintenance_window_accepted_count": 0,
    "offsite_remote_delete_authorized_count": 0,
    "offsite_sync_accepted_count": 0,
    "offsite_sync_authorized_count": 0,
    "outcome_lane_count": 9,
    "owner_response_accepted_count": 0,
    "owner_response_quarantined_count": 0,
    "owner_response_received_count": 0,
    "owner_response_rejected_count": 0,
    "rclone_config_authorized_count": 0,
    "recipient_confirmed_count": 0,
    "remote_delete_guard_accepted_count": 0,
    "request_sent_count": 0,
    "required_owner_field_count": 23,
    "restic_prune_authorized_count": 0,
    "restore_drill_accepted_count": 0,
    "restore_observer_stop_condition_accepted_count": 0,
    "restore_run_authorized_count": 0,
    "restore_target_isolation_accepted_count": 0,
    "retention_change_accepted_count": 0,
    "retention_change_authorized_count": 0,
    "retention_runway_accepted_count": 0,
    "reviewer_check_count": 22,
    "rollback_owner_accepted_count": 0,
    "runtime_gate_count": 0,
    "secret_value_collection_allowed_count": 0,
    "source_request_draft_count": 38,
    "source_surface_count": 38,
    "ssh_read_authorized_count": 0,
    "ssh_write_authorized_count": 0,
    "supplement_requested_count": 0,
    "validation_plan_accepted_count": 0,
    "velero_backup_authorized_count": 0,
    "velero_restore_authorized_count": 0,
    "write_capable_acceptance_candidate_count": 27
  }
}