awoooi/docs/security/backup-restore-post-incident-readback-plan.snapshot.json

{
  "blocked_actions": [
    "backup_run",
    "restore_run",
    "restore_drill",
    "production_restore",
    "offsite_sync",
    "offsite_remote_delete",
    "credential_escrow_marker_write",
    "credential_recovery_execution",
    "retention_change",
    "retention_prune",
    "restic_prune",
    "rclone_config_read",
    "rclone_config_change",
    "velero_restore",
    "velero_backup",
    "kubectl_action",
    "ssh_read",
    "ssh_write",
    "secret_value_collection",
    "secret_hash_collection",
    "partial_token_collection",
    "restic_password_collection",
    "rclone_token_collection",
    "kubeconfig_collection",
    "host_write",
    "active_scan",
    "production_write",
    "runtime_gate_open",
    "raw_backup_payload_storage",
    "raw_restore_payload_storage",
    "raw_object_listing_storage",
    "raw_db_dump_storage",
    "accept_secret_value_evidence",
    "accept_credential_derivative_evidence",
    "mark_readback_accepted_without_reviewer_record",
    "accept_backup_success_without_freshness_slo",
    "accept_restore_without_isolated_target",
    "accept_offsite_without_remote_delete_guard",
    "accept_retention_without_runway",
    "accept_credential_recovery_without_non_secret_proof",
    "accept_backup_health_false_green",
    "accept_alert_quiet_as_backup_healthy",
    "accept_textfile_present_as_dr_complete",
    "skip_dependency_map_review",
    "skip_data_classification_review",
    "skip_restore_observer_stop_condition",
    "skip_cross_project_sync",
    "skip_rollback_validation",
    "skip_post_change_monitoring",
    "forge_credential_escrow_evidence",
    "add_action_button"
  ],
  "execution_boundaries": {
    "action_buttons_allowed": false,
    "active_scan_authorized": false,
    "backup_run_authorized": false,
    "credential_escrow_marker_write_authorized": false,
    "credential_recovery_execution_authorized": false,
    "host_write_authorized": false,
    "kubectl_action_authorized": false,
    "not_authorization": true,
    "offsite_remote_delete_authorized": false,
    "offsite_sync_authorized": false,
    "production_write_authorized": false,
    "raw_backup_payload_storage_allowed": false,
    "rclone_config_authorized": false,
    "restic_prune_authorized": false,
    "restore_run_authorized": false,
    "retention_change_authorized": false,
    "runtime_gate": false,
    "secret_value_collection_allowed": false,
    "ssh_read_authorized": false,
    "ssh_write_authorized": false,
    "velero_backup_authorized": false,
    "velero_restore_authorized": false
  },
  "generated_at": "2026-06-18T10:30:00+08:00",
  "git_commit": "3e30807c",
  "mode": "metadata_only_no_backup_no_restore_no_secret_value",
  "operator_interpretation": [
    "此計畫只定義 Backup / Restore / Escrow 事故後回讀欄位，不代表 live backup store 已讀取或可讀取。",
    "backup success、route 200、dashboard up、alert quiet、textfile present、UI 可見或 CD success 都不能單獨當成 DR / backup 健康。",
    "未來若要 backup、restore、offsite sync、remote delete、retention / prune、escrow marker、Velero、kubectl、SSH 或 production write，必須另有維護窗口、rollback owner 與人工批准。"
  ],
  "outcome_lanes": [
    {
      "lane_id": "waiting_post_incident_readback",
      "meaning": "尚未收到 Backup / Restore / Escrow 事故回讀包；所有 accepted / runtime count 維持 0。"
    },
    {
      "lane_id": "request_actor_or_time_supplement",
      "meaning": "缺 actor、change / outage time window、intent 或 break-glass reason 時要求補件。"
    },
    {
      "lane_id": "request_backup_freshness_supplement",
      "meaning": "缺 before / after freshness、backup status、alert textfile 或 scorecard 時要求補件。"
    },
    {
      "lane_id": "request_restore_isolation_supplement",
      "meaning": "缺 restore drill、隔離目標、observer、stop condition 或 rollback validation 時要求補件。"
    },
    {
      "lane_id": "request_offsite_retention_supplement",
      "meaning": "缺 offsite sync、remote delete guard、retention runway 或 prune decision 時要求補件。"
    },
    {
      "lane_id": "request_escrow_non_secret_supplement",
      "meaning": "缺 credential escrow non-secret proof 或 recovery drill metadata 時要求補件。"
    },
    {
      "lane_id": "quarantine_raw_payload",
      "meaning": "收到 secret、raw backup listing、raw restore payload、raw DB dump、rclone config 或未脫敏截圖時只能隔離。"
    },
    {
      "lane_id": "reject_false_green_claim",
      "meaning": "把 backup success、route 200、dashboard up、alert quiet、textfile present 或 UI 可見當驗收時拒收。"
    },
    {
      "lane_id": "ready_for_backup_restore_post_incident_review",
      "meaning": "metadata 合格後，只能進 backup / restore reviewer review。"
    },
    {
      "lane_id": "recurrence_guard_backfill_required",
      "meaning": "需補防再發 guard、retention freeze、remote-delete block、owner review 或 automation block。"
    },
    {
      "lane_id": "waiting_runtime_gate",
      "meaning": "即使 readback accepted，runtime gate 仍需獨立人工批准。"
    }
  ],
  "readback_candidates": [
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "gitea",
        "momo",
        "harbor",
        "awoooi",
        "langfuse",
        "monitoring",
        "signoz",
        "open-webui",
        "clawbot"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_orchestrator",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_all_orchestrator",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_all_orchestrator",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_all_orchestrator",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_all_orchestrator",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "RESTIC_PASSWORD_FILE",
        "B2 metadata",
        "KEEP_DAILY=30",
        "KEEP_WEEKLY=12",
        "KEEP_MONTHLY=24"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_common_policy",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_common_restic_retention",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_common_restic_retention",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_common_restic_retention",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_common_restic_retention",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Gitea DB",
        "repositories",
        "app.ini redaction boundary"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_gitea_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_gitea_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_gitea_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_gitea_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "MOMO PostgreSQL",
        "188 database path"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_momo_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_momo_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_momo_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_momo_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Harbor registry",
        "Harbor DB",
        "image registry recovery"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_harbor_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_harbor_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_harbor_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_harbor_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "awoooi_prod",
        "awoooi_dev",
        "k3s datastore"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_awoooi_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_awoooi_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_awoooi_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "awoooi_prod",
        "6h RPO",
        "latest-only interaction"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_awoooi_frequent_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_awoooi_frequent_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_awoooi_frequent_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_awoooi_frequent_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Langfuse DB",
        "AI trace evidence"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_langfuse_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_langfuse_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_langfuse_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_langfuse_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Prometheus",
        "Grafana",
        "Alertmanager"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_monitoring_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_monitoring_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_monitoring_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_monitoring_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "SigNoz ClickHouse",
        "SigNoz SQLite"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_signoz_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_signoz_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_signoz_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_signoz_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Open-WebUI volume",
        "LLM conversation data"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_open_webui_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_open_webui_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_open_webui_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_open_webui_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "ClawBot Redis",
        "agent state cache"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_clawbot_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_clawbot_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_clawbot_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_clawbot_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Sentry",
        "ClickHouse / Postgres / Redis dependency boundary"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_sentry_service_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_sentry_service_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_sentry_service_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_sentry_service_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "AI artifacts",
        "model / evaluation outputs"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_ai_artifacts_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_ai_artifacts_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_ai_artifacts_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_ai_artifacts_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "public routes",
        "Nginx route reconstruction",
        "frontend/API smoke evidence"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "service_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_public_routes_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_public_routes_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_public_routes_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_public_routes_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "systemd",
        "docker",
        "nginx",
        "cron",
        "k8s",
        "host configs"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "config_backup_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:config_backup_capture",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:config_backup_capture",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:config_backup_capture",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "config_backup_capture",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "freshness",
        "failure",
        "integrity",
        "restore drill",
        "offsite",
        "escrow"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_status_reporter",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_status_reporter",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_status_reporter",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_reporter",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_status_reporter",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restic check",
        "read-data subset",
        "integrity evidence"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "integrity_check_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_integrity_check",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_integrity_check",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_integrity_check",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_integrity_check",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "keep latest",
        "local delete",
        "retention marker"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "retention_enforcer",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:latest_only_retention_enforcer",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:latest_only_retention_enforcer",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:latest_only_retention_enforcer",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "latest_only_retention_enforcer",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "13 repos",
        "rclone sync",
        "remote delete",
        "success markers"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_sync_controller",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_sync_controller",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_sync_controller",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_sync_controller",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_sync_controller",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "remote repo count",
        "latest-only evidence",
        "textfile metrics"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_verifier",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_full_sync_verifier",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_full_sync_verifier",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_full_sync_verifier",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_full_sync_verifier",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "status",
        "dry-run-small",
        "pre-full-sync",
        "escrow markers"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_readiness_gate",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_readiness_gate",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_readiness_gate",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_readiness_gate",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_readiness_gate",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "script presence",
        "offsite marker",
        "escrow marker",
        "redacted output"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_escrow_report",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_escrow_evidence_report",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_escrow_evidence_report",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_evidence_report",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_escrow_evidence_report",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restic password",
        "offsite provider",
        "break-glass admin",
        "DNS recovery",
        "OAuth / AI provider recovery"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "credential_escrow_marker",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:credential_escrow_marker",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:credential_escrow_marker",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:credential_escrow_marker",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "credential_escrow_marker",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "rclone remote",
        "Google Drive",
        "offsite.env metadata"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_rclone_config",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_rclone_config",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_rclone_config",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_rclone_config",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_rclone_config",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Backblaze B2 metadata",
        "offsite env",
        "fallback provider"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_b2_config",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_b2_config",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_b2_config",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_b2_config",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_b2_config",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "freshness metrics",
        "restore drill metrics",
        "offsite metrics",
        "escrow metrics"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_health_exporter",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_health_textfile_exporter",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_health_textfile_exporter",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_health_textfile_exporter",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_health_textfile_exporter",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Velero restore dry-run",
        "weekly schedule",
        "textfile metrics"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "velero_restore_cronjob",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:velero_restore_test_cronjob",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:velero_restore_test_cronjob",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_cronjob",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "velero_restore_test_cronjob",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restore dry-run script",
        "13-digit textfile timestamp risk",
        "Prometheus textfile"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "velero_restore_script_configmap",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:velero_restore_test_script_configmap",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:velero_restore_test_script_configmap",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_restore_test_script_configmap",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "velero_restore_test_script_configmap",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "restore dry-run",
        "Prometheus textfile seconds timestamp",
        "failure metric"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "velero_restore_standalone_script",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:velero_standalone_restore_test_script",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:velero_standalone_restore_test_script",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_standalone_restore_test_script",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "velero_standalone_restore_test_script",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "MinIO credential names",
        "placeholder values",
        "External Secrets / Sealed Secrets recommendation"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "velero_credentials_manifest",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:velero_credentials_manifest",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:velero_credentials_manifest",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_credentials_manifest",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "velero_credentials_manifest",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "Velero Deployment",
        "cluster-admin binding",
        "MinIO s3Url",
        "backup storage location"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "velero_install_manifest",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:velero_install_manifest",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:velero_install_manifest",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:velero_install_manifest",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "velero_install_manifest",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "BackupRestoreTestFailed",
        "Velero freshness",
        "offsite freshness",
        "restore stale"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_restore_alert_rules",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_restore_alert_rules",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_restore_alert_rules",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_alert_rules",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_restore_alert_rules",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "readiness matrix",
        "blocked targets",
        "restore drill status"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "dr_readiness_contract",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_dr_readiness_contract",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_dr_readiness_contract",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_dr_readiness_contract",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_dr_readiness_contract",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "database restore",
        "configuration restore",
        "credential escrow",
        "K8s restore",
        "observability restore"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "restore_drill_approval_template",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_restore_drill_approval_template",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_restore_drill_approval_template",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_restore_drill_approval_template",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_restore_drill_approval_template",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "offsite_rclone_full_sync",
        "credential_escrow_markers",
        "velero_k8s_resources"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "offsite_escrow_readiness_contract",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:offsite_escrow_readiness_contract",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:offsite_escrow_readiness_contract",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:offsite_escrow_readiness_contract",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "offsite_escrow_readiness_contract",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "110 backup center",
        "latest-only",
        "Google Drive / rclone",
        "credential escrow",
        "120 blocker"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "backup_status_runbook",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:backup_status_runbook",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:backup_status_runbook",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:backup_status_runbook",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "backup_status_runbook",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "active_scan_authorized": false,
      "actor_attribution_accepted": false,
      "actor_attribution_ref": null,
      "after_backup_freshness_state_ref": null,
      "alert_textfile_readback_accepted": false,
      "alert_textfile_readback_ref": null,
      "backup_dependency_map_readback_accepted": false,
      "backup_dependency_map_readback_ref": null,
      "backup_health_no_false_green_readback_accepted": false,
      "backup_health_no_false_green_readback_ref": null,
      "backup_incident_or_change_ref": null,
      "backup_run_authorized": false,
      "backup_scope": [
        "cold start",
        "backup-all",
        "sync-offsite",
        "restore guard",
        "schedules"
      ],
      "backup_status_readback_accepted": false,
      "backup_status_readback_ref": null,
      "before_after_freshness_accepted": false,
      "before_backup_freshness_state_ref": null,
      "blocked_actions": [
        "backup_run",
        "restore_run",
        "restore_drill",
        "production_restore",
        "offsite_sync",
        "offsite_remote_delete",
        "credential_escrow_marker_write",
        "credential_recovery_execution",
        "retention_change",
        "retention_prune",
        "restic_prune",
        "rclone_config_read",
        "rclone_config_change",
        "velero_restore",
        "velero_backup",
        "kubectl_action",
        "ssh_read",
        "ssh_write",
        "secret_value_collection",
        "secret_hash_collection",
        "partial_token_collection",
        "restic_password_collection",
        "rclone_token_collection",
        "kubeconfig_collection",
        "host_write",
        "active_scan",
        "production_write",
        "runtime_gate_open",
        "raw_backup_payload_storage",
        "raw_restore_payload_storage",
        "raw_object_listing_storage",
        "raw_db_dump_storage",
        "accept_secret_value_evidence",
        "accept_credential_derivative_evidence",
        "mark_readback_accepted_without_reviewer_record",
        "accept_backup_success_without_freshness_slo",
        "accept_restore_without_isolated_target",
        "accept_offsite_without_remote_delete_guard",
        "accept_retention_without_runway",
        "accept_credential_recovery_without_non_secret_proof",
        "accept_backup_health_false_green",
        "accept_alert_quiet_as_backup_healthy",
        "accept_textfile_present_as_dr_complete",
        "skip_dependency_map_review",
        "skip_data_classification_review",
        "skip_restore_observer_stop_condition",
        "skip_cross_project_sync",
        "skip_rollback_validation",
        "skip_post_change_monitoring",
        "forge_credential_escrow_evidence",
        "add_action_button"
      ],
      "change_intent_or_break_glass_ref": null,
      "change_or_outage_time_window_ref": null,
      "cold_start_dr_scorecard_accepted": false,
      "cold_start_dr_scorecard_ref": null,
      "config_kind": "cold_start_sop",
      "control_tier": "C0",
      "credential_escrow_marker_write_authorized": false,
      "credential_escrow_non_secret_readback_accepted": false,
      "credential_escrow_non_secret_readback_ref": null,
      "credential_recovery_drill_readback_accepted": false,
      "credential_recovery_drill_readback_ref": null,
      "credential_recovery_execution_authorized": false,
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "data_classification_readback_accepted": false,
      "data_classification_readback_ref": null,
      "followup_owner": "pending_post_incident_readback",
      "host_write_authorized": false,
      "kubectl_action_authorized": false,
      "maintenance_window": "pending_post_incident_readback",
      "no_false_green_accepted": false,
      "not_approval": true,
      "offsite_remote_delete_authorized": false,
      "offsite_remote_delete_guard_accepted": false,
      "offsite_remote_delete_guard_readback_ref": null,
      "offsite_sync_authorized": false,
      "offsite_sync_readback_accepted": false,
      "offsite_sync_readback_ref": null,
      "outcome_lanes": [
        "waiting_post_incident_readback",
        "request_actor_or_time_supplement",
        "request_backup_freshness_supplement",
        "request_restore_isolation_supplement",
        "request_offsite_retention_supplement",
        "request_escrow_non_secret_supplement",
        "quarantine_raw_payload",
        "reject_false_green_claim",
        "ready_for_backup_restore_post_incident_review",
        "recurrence_guard_backfill_required",
        "waiting_runtime_gate"
      ],
      "post_change_monitoring_accepted": false,
      "post_change_monitoring_ref": null,
      "post_incident_readback_accepted": false,
      "post_incident_readback_candidate_id": "backup_restore_post_incident_readback:cold_start_sop",
      "post_incident_readback_received": false,
      "postcheck_readback_accepted": false,
      "postcheck_readback_ref": null,
      "production_write_authorized": false,
      "rclone_config_authorized": false,
      "readback_fields": [
        "post_incident_readback_candidate_id",
        "source_acceptance_candidate_id",
        "request_id",
        "surface_id",
        "config_kind",
        "backup_scope",
        "control_tier",
        "write_capable_surface",
        "requires_live_evidence",
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "reviewer_outcome",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation",
        "not_approval"
      ],
      "recurrence_guard_accepted": false,
      "recurrence_guard_ref": null,
      "redacted_evidence_refs": [],
      "request_id": "backup_restore_owner_request:cold_start_sop",
      "required_readback_fields": [
        "backup_incident_or_change_ref",
        "actor_attribution_ref",
        "change_or_outage_time_window_ref",
        "change_intent_or_break_glass_ref",
        "before_backup_freshness_state_ref",
        "after_backup_freshness_state_ref",
        "backup_status_readback_ref",
        "restore_drill_readback_ref",
        "restore_target_isolation_readback_ref",
        "offsite_sync_readback_ref",
        "offsite_remote_delete_guard_readback_ref",
        "credential_escrow_non_secret_readback_ref",
        "credential_recovery_drill_readback_ref",
        "retention_runway_readback_ref",
        "retention_or_prune_decision_ref",
        "backup_dependency_map_readback_ref",
        "data_classification_readback_ref",
        "restore_observer_stop_condition_ref",
        "backup_health_no_false_green_readback_ref",
        "alert_textfile_readback_ref",
        "cold_start_dr_scorecard_ref",
        "cross_project_sync_ref",
        "rollback_validation_ref",
        "post_change_monitoring_ref",
        "postcheck_readback_ref",
        "recurrence_guard_ref",
        "maintenance_window",
        "rollback_owner",
        "followup_owner",
        "redacted_evidence_refs",
        "no_secret_value_attestation",
        "no_raw_backup_payload_attestation",
        "no_production_restore_attestation",
        "no_false_green_attestation"
      ],
      "requires_live_evidence": true,
      "restic_prune_authorized": false,
      "restore_drill_readback_accepted": false,
      "restore_drill_readback_ref": null,
      "restore_observer_stop_condition_accepted": false,
      "restore_observer_stop_condition_ref": null,
      "restore_run_authorized": false,
      "restore_target_isolation_readback_accepted": false,
      "restore_target_isolation_readback_ref": null,
      "retention_change_authorized": false,
      "retention_or_prune_decision_accepted": false,
      "retention_or_prune_decision_ref": null,
      "retention_runway_readback_accepted": false,
      "retention_runway_readback_ref": null,
      "reviewer_checks": [
        "source_owner_response_acceptance_current",
        "incident_or_change_ref_present",
        "actor_attribution_present",
        "change_or_outage_time_window_present",
        "intent_or_break_glass_present",
        "before_after_freshness_present",
        "backup_status_readback_present",
        "restore_drill_readback_present",
        "restore_target_isolation_present",
        "offsite_sync_readback_present",
        "remote_delete_guard_present",
        "credential_escrow_non_secret_present",
        "credential_recovery_drill_metadata_only",
        "retention_runway_present",
        "retention_or_prune_decision_present",
        "dependency_map_present",
        "data_classification_present",
        "restore_observer_stop_condition_present",
        "backup_health_no_false_green_present",
        "alert_textfile_readback_present",
        "cold_start_scorecard_present",
        "cross_project_sync_present",
        "rollback_validation_present",
        "post_change_monitoring_present",
        "postcheck_independent",
        "recurrence_guard_present",
        "maintenance_window_present",
        "redacted_refs_only",
        "secret_value_absent",
        "raw_payload_absent",
        "no_false_green",
        "runtime_stays_zero"
      ],
      "reviewer_outcome": "waiting_post_incident_readback",
      "rollback_owner": "pending_post_incident_readback",
      "rollback_validation_accepted": false,
      "rollback_validation_ref": null,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "source_acceptance_candidate_id": "backup_restore_owner_response_acceptance:cold_start_sop",
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_post_incident_readback",
      "surface_id": "cold_start_sop",
      "velero_backup_authorized": false,
      "velero_restore_authorized": false,
      "write_capable_surface": false
    }
  ],
  "readback_fields": [
    "post_incident_readback_candidate_id",
    "source_acceptance_candidate_id",
    "request_id",
    "surface_id",
    "config_kind",
    "backup_scope",
    "control_tier",
    "write_capable_surface",
    "requires_live_evidence",
    "backup_incident_or_change_ref",
    "actor_attribution_ref",
    "change_or_outage_time_window_ref",
    "change_intent_or_break_glass_ref",
    "before_backup_freshness_state_ref",
    "after_backup_freshness_state_ref",
    "backup_status_readback_ref",
    "restore_drill_readback_ref",
    "restore_target_isolation_readback_ref",
    "offsite_sync_readback_ref",
    "offsite_remote_delete_guard_readback_ref",
    "credential_escrow_non_secret_readback_ref",
    "credential_recovery_drill_readback_ref",
    "retention_runway_readback_ref",
    "retention_or_prune_decision_ref",
    "backup_dependency_map_readback_ref",
    "data_classification_readback_ref",
    "restore_observer_stop_condition_ref",
    "backup_health_no_false_green_readback_ref",
    "alert_textfile_readback_ref",
    "cold_start_dr_scorecard_ref",
    "cross_project_sync_ref",
    "rollback_validation_ref",
    "post_change_monitoring_ref",
    "postcheck_readback_ref",
    "recurrence_guard_ref",
    "maintenance_window",
    "rollback_owner",
    "followup_owner",
    "redacted_evidence_refs",
    "reviewer_outcome",
    "no_secret_value_attestation",
    "no_raw_backup_payload_attestation",
    "no_production_restore_attestation",
    "no_false_green_attestation",
    "not_approval"
  ],
  "required_readback_fields": [
    "backup_incident_or_change_ref",
    "actor_attribution_ref",
    "change_or_outage_time_window_ref",
    "change_intent_or_break_glass_ref",
    "before_backup_freshness_state_ref",
    "after_backup_freshness_state_ref",
    "backup_status_readback_ref",
    "restore_drill_readback_ref",
    "restore_target_isolation_readback_ref",
    "offsite_sync_readback_ref",
    "offsite_remote_delete_guard_readback_ref",
    "credential_escrow_non_secret_readback_ref",
    "credential_recovery_drill_readback_ref",
    "retention_runway_readback_ref",
    "retention_or_prune_decision_ref",
    "backup_dependency_map_readback_ref",
    "data_classification_readback_ref",
    "restore_observer_stop_condition_ref",
    "backup_health_no_false_green_readback_ref",
    "alert_textfile_readback_ref",
    "cold_start_dr_scorecard_ref",
    "cross_project_sync_ref",
    "rollback_validation_ref",
    "post_change_monitoring_ref",
    "postcheck_readback_ref",
    "recurrence_guard_ref",
    "maintenance_window",
    "rollback_owner",
    "followup_owner",
    "redacted_evidence_refs",
    "no_secret_value_attestation",
    "no_raw_backup_payload_attestation",
    "no_production_restore_attestation",
    "no_false_green_attestation"
  ],
  "reviewer_checks": [
    {
      "check_id": "source_owner_response_acceptance_current",
      "instruction": "來源 owner response acceptance snapshot 必須是目前版本。"
    },
    {
      "check_id": "incident_or_change_ref_present",
      "instruction": "必須有 incident、change、outage、ticket 或 maintenance ref，不能只寫備份正常。"
    },
    {
      "check_id": "actor_attribution_present",
      "instruction": "必須標示 actor role / team，不接受匿名 backup、restore、sync、prune 或 escrow marker write。"
    },
    {
      "check_id": "change_or_outage_time_window_present",
      "instruction": "必須有變更 / 異常時間窗，供 freshness、offsite、alert 與 cold-start scorecard 對齊。"
    },
    {
      "check_id": "intent_or_break_glass_present",
      "instruction": "正常變更需有 change intent；緊急變更需有 break-glass reason，但 break-glass 不等於事前批准。"
    },
    {
      "check_id": "before_after_freshness_present",
      "instruction": "必須有 before / after backup freshness state ref，不得只看最新一次成功。"
    },
    {
      "check_id": "backup_status_readback_present",
      "instruction": "backup status 只能收 owner-provided redacted ref，不得讀 raw backup store 或未脫敏 listing。"
    },
    {
      "check_id": "restore_drill_readback_present",
      "instruction": "restore drill 必須是 readback / approval metadata，不得是 production restore 執行要求。"
    },
    {
      "check_id": "restore_target_isolation_present",
      "instruction": "必須有隔離 restore target 或明確 no-production-write 邊界。"
    },
    {
      "check_id": "offsite_sync_readback_present",
      "instruction": "offsite sync 必須有 redacted state ref，不得保存 raw remote path、object listing 或 rclone config。"
    },
    {
      "check_id": "remote_delete_guard_present",
      "instruction": "任何 latest-only、remote delete 或 retention policy 必須有 remote delete guard 與 owner ref。"
    },
    {
      "check_id": "credential_escrow_non_secret_present",
      "instruction": "credential escrow 只能是 non-secret proof / marker ref，不得包含 value、hash、seed、recovery code 或 partial token。"
    },
    {
      "check_id": "credential_recovery_drill_metadata_only",
      "instruction": "credential recovery drill 必須以 metadata / evidence id 呈現，不保存 secret derivative。"
    },
    {
      "check_id": "retention_runway_present",
      "instruction": "retention / prune 必須有可恢復窗口、runway、撤回條件與 owner。"
    },
    {
      "check_id": "retention_or_prune_decision_present",
      "instruction": "retention 或 prune decision 必須獨立列出，不得與 offsite sync 成功混在一起。"
    },
    {
      "check_id": "dependency_map_present",
      "instruction": "必須列出 DB、repo、registry、object storage、K8s、monitoring、credential escrow 與 DR runbook 依賴圖 ref。"
    },
    {
      "check_id": "data_classification_present",
      "instruction": "必須標示備份集資料分級；不得要求 raw customer data、payload 或 unredacted archive listing。"
    },
    {
      "check_id": "restore_observer_stop_condition_present",
      "instruction": "restore / drill 必須有 observer、stop condition、rollback owner 與停損條件。"
    },
    {
      "check_id": "backup_health_no_false_green_present",
      "instruction": "backup health / textfile / alert evidence 必須防止 false green，不能只看單一 healthy、route 200 或 dashboard up。"
    },
    {
      "check_id": "alert_textfile_readback_present",
      "instruction": "若涉及告警或 textfile exporter，必須回讀 stale / partial / missing marker，不得只看 alert quiet。"
    },
    {
      "check_id": "cold_start_scorecard_present",
      "instruction": "若影響冷啟動或 DR，必須有 cold-start / scorecard ref，且不能偽造 credential escrow evidence。"
    },
    {
      "check_id": "cross_project_sync_present",
      "instruction": "若影響 AwoooP、IwoooS、momo、Gitea、Harbor、monitoring 或公開站，需有跨專案同步 ref。"
    },
    {
      "check_id": "rollback_validation_present",
      "instruction": "必須提供 rollback validation ref，包含 rollback owner 與回復方式。"
    },
    {
      "check_id": "post_change_monitoring_present",
      "instruction": "必須有 post-change monitoring window，觀察 freshness、offsite、restore target、alerts 與 scorecard。"
    },
    {
      "check_id": "postcheck_independent",
      "instruction": "post-check 必須獨立於原操作人、單一 backup status 與 UI 顯示。"
    },
    {
      "check_id": "recurrence_guard_present",
      "instruction": "必須提出防再發 guard、owner review、retention freeze、remote-delete block 或 automation block。"
    },
    {
      "check_id": "maintenance_window_present",
      "instruction": "後續任何 backup、restore、offsite sync、prune、escrow marker 或 Velero 動作都需維護窗口。"
    },
    {
      "check_id": "redacted_refs_only",
      "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。"
    },
    {
      "check_id": "secret_value_absent",
      "instruction": "不得出現 token、private key、rclone config、restic password、seed、kubeconfig、recovery code、credential URL 或 partial secret。"
    },
    {
      "check_id": "raw_payload_absent",
      "instruction": "不得保存 raw backup listing、raw restore payload、raw archive content、raw object path、raw DB dump 或未脫敏 screenshot。"
    },
    {
      "check_id": "no_false_green",
      "instruction": "不得只用 backup success、route 200、dashboard up、alert quiet、textfile present、UI 可見或 CD success 當 DR / backup 驗收。"
    },
    {
      "check_id": "runtime_stays_zero",
      "instruction": "readback plan 不得觸發 backup、restore、offsite sync、remote delete、retention change、prune、Velero、kubectl、SSH 或 production write。"
    }
  ],
  "schema_version": "backup_restore_post_incident_readback_plan_v1",
  "source_paths": [
    "docs/security/BACKUP-RESTORE-ESCROW-INVENTORY.md",
    "docs/security/backup-restore-escrow-inventory.snapshot.json",
    "docs/security/BACKUP-RESTORE-OWNER-RESPONSE-ACCEPTANCE.md",
    "docs/security/backup-restore-owner-response-acceptance.snapshot.json"
  ],
  "source_schema_version": "backup_restore_owner_response_acceptance_v1",
  "source_status": "owner_response_acceptance_ledger_ready_no_runtime_action",
  "status": "post_incident_readback_plan_ready_no_runtime_action",
  "summary": {
    "action_button_count": 0,
    "active_scan_authorized_count": 0,
    "actor_attribution_accepted_count": 0,
    "alert_textfile_readback_accepted_count": 0,
    "backup_dependency_map_readback_accepted_count": 0,
    "backup_health_no_false_green_readback_accepted_count": 0,
    "backup_run_authorized_count": 0,
    "backup_status_readback_accepted_count": 0,
    "before_after_freshness_accepted_count": 0,
    "blocked_action_count": 51,
    "cold_start_dr_scorecard_accepted_count": 0,
    "coverage_percent_after_readback_plan": 66,
    "credential_escrow_marker_write_authorized_count": 0,
    "credential_escrow_non_secret_readback_accepted_count": 0,
    "credential_recovery_drill_readback_accepted_count": 0,
    "credential_recovery_execution_authorized_count": 0,
    "cross_project_sync_accepted_count": 0,
    "cross_project_sync_required_candidate_count": 38,
    "data_classification_readback_accepted_count": 0,
    "host_write_authorized_count": 0,
    "kubectl_action_authorized_count": 0,
    "live_evidence_required_readback_candidate_count": 38,
    "no_false_green_accepted_count": 0,
    "no_false_green_required_candidate_count": 38,
    "offsite_or_escrow_readback_required_candidate_count": 20,
    "offsite_remote_delete_authorized_count": 0,
    "offsite_remote_delete_guard_accepted_count": 0,
    "offsite_sync_authorized_count": 0,
    "offsite_sync_readback_accepted_count": 0,
    "outcome_lane_count": 11,
    "post_change_monitoring_accepted_count": 0,
    "post_incident_readback_accepted_count": 0,
    "post_incident_readback_received_count": 0,
    "postcheck_readback_accepted_count": 0,
    "production_write_authorized_count": 0,
    "rclone_config_authorized_count": 0,
    "readback_candidate_count": 38,
    "readback_field_count": 45,
    "recurrence_guard_accepted_count": 0,
    "required_readback_field_count": 34,
    "restic_prune_authorized_count": 0,
    "restore_drill_readback_accepted_count": 0,
    "restore_drill_readback_required_candidate_count": 38,
    "restore_observer_stop_condition_accepted_count": 0,
    "restore_run_authorized_count": 0,
    "restore_target_isolation_readback_accepted_count": 0,
    "retention_change_authorized_count": 0,
    "retention_or_prune_decision_accepted_count": 0,
    "retention_or_remote_delete_readback_required_candidate_count": 17,
    "retention_runway_readback_accepted_count": 0,
    "reviewer_check_count": 32,
    "rollback_validation_accepted_count": 0,
    "runtime_gate_count": 0,
    "secret_value_collection_allowed_count": 0,
    "source_acceptance_candidate_count": 38,
    "source_blocked_action_count": 31,
    "source_live_evidence_required_candidate_count": 38,
    "source_owner_response_accepted_count": 0,
    "source_required_owner_field_count": 23,
    "source_reviewer_check_count": 22,
    "source_runtime_gate_count": 0,
    "source_write_capable_acceptance_candidate_count": 27,
    "ssh_read_authorized_count": 0,
    "ssh_write_authorized_count": 0,
    "velero_backup_authorized_count": 0,
    "velero_restore_authorized_count": 0,
    "write_capable_readback_candidate_count": 27
  }
}