awoooi/docs/proposals/AWOOOI-AG99-H110-BACKUP-RUNTIME-V7.md

AWOOOI Agent99 Host110 Backup Runtime V7

Status: proposed; owner approval required before any production apply.

This artifact supersedes V2 through V6. All V5 proposal, artifact, and diff hashes are void. This file is review evidence only; it is not active policy or production execution authority.

Scope

• Agent99 runtime bundle: 19 files. Every producer and consumer is guarded by one exact parity test.
• Host110 backup payload: 18 files, comprising 17 backup scripts and backup-health-textfile-exporter.py.
• Host110 remote stage: 21 files, comprising the 18 payload files, the fixed executor, the independent verifier, and the source manifest.
• Fixed target: wooo@192.168.0.110, dispatched by Windows99 Agent99 from an exact Gitea live revision and digest manifest.
• Gitea offline backup and container lifecycle changes are excluded from this proposal. backup-gitea.sh has no candidate diff. The only Gitea-related diff is a shared deployment lock in the read-only restore-drill entrypoint; it adds no Docker command and is not executed by the deployment transaction.

Exact Diff Serialization

Substitute the V7 Gitea live-ref SHA for <candidate_git_sha> and hash the exact stdout bytes from this command:

git diff --binary --full-index \
  e7e3bcf8a5a8a19c1253d73f51d9dca248af0aa3..<candidate_git_sha> |
  shasum -a 256

The review message independently binds the Gitea live ref and Git SHA, this tracked artifact path and bytes hash, and the serialized diff hash.

Apply Effects

• Windows99 Agent99 runtime promotion writes the 19 runtime files plus bounded manifest and receipt state.
• Host110 Apply writes/replaces the 18 payload paths through one exclusive, digest-bound filesystem transaction.
• Apply does not run a backup, invoke a Gitea container lifecycle, sync Google Drive, prune or delete snapshots, restart a VM or service, or change a DB, network, or firewall.

Validation

• Post-split focused runtime, broker, backup, and parity suites must pass.
• Ansible and shell/Python static validation must pass.
• Changed PowerShell must parse on Windows99 with zero errors.
• Central review must independently reproduce the live ref, artifact hash, diff hash, and 19/18/21 counts.

Rollback

• Source rollback reverts the exact V7 diff to e7e3bcf8a5a8a19c1253d73f51d9dca248af0aa3 without force-pushing.
• Agent99 rollback restores the prior runtime files and manifest and verifies the prior hashes independently.
• Host110 rollback restores every prior payload's content, SHA-256, uid, gid, and mode under the exclusive lock.
• Any mismatch terminates as rollback_unverified and cannot be reported as a successful rollback.