Postgres now reports custody_class=operational with a cited 30-day recoverable window. Join ITC-CAP operations.audit at D4, publish the interface card, and overlay user-engine tenants [*] from Git so an ExternalSecret refresh cannot shrink it.
37 lines
1.5 KiB
JSON
37 lines
1.5 KiB
JSON
{
|
|
"workplan_task": "AUDIT-WP-0005-T06",
|
|
"recorded_at": "2026-08-13T12:12:00Z",
|
|
"path": "logical single-consumer dump of live audit_core, restore into local PostgreSQL 16",
|
|
"source": "platform-pg-1 / audit_core on railiance01",
|
|
"destination": "throwaway postgres:16-alpine (127.0.0.1:55446), deleted after verify",
|
|
"elapsed_seconds": 4.072,
|
|
"counts": {
|
|
"events": 21,
|
|
"dead_letters": 3,
|
|
"secret_findings": 1,
|
|
"migrations": 4
|
|
},
|
|
"trigger": "events_append_only",
|
|
"sample_triples_matched": 5,
|
|
"sample_event_ids": [
|
|
"ok-1a39fe39",
|
|
"rot2-45d720f4",
|
|
"rot2-66c15638",
|
|
"fm-deliver-a25fd813",
|
|
"fm-redact-fccd1dd8"
|
|
],
|
|
"matches_platform_drill": true,
|
|
"platform_evidence": "rapp-postgres/docs/evidence/backup-restore-20260813T111651Z-remote.json",
|
|
"platform_full_restore_seconds": 51.044,
|
|
"platform_pitr_seconds": 52.455,
|
|
"platform_logical_seconds": 3.468,
|
|
"retention": {
|
|
"audit_core_retention_days": null,
|
|
"audit_core_meaning": "does not expire or delete events; lifecycle statement, not a recovery guarantee",
|
|
"platform_planned_window_days": 30,
|
|
"production_barman": "superseded 2026-08-14 by RESOURCE-WP-0002-T05: live Scaleway Barman, 30-day window, audit_core.events 30=30, full 65s / PITR 65s",
|
|
"recovery_bound": "platform data.backup window (resource:platform:audit-storage), not audit-core deletion",
|
|
"provision_honesty": "requirement D5, provision D4; cited, not re-scored here"
|
|
},
|
|
"verified": true
|
|
}
|