A viable emergency planning, preparation and response system for complex organizational environments. Brace for impact and recover quickly.
tegwick
9ca741908e
Register backup-netkingdom-identity (LLDAP, privacyIDEA DB/token material/audit, KeyCape client registry archive) as a T0 backup stream: daily 03:45 UTC age-encrypted upload to one off-host provider (Storage Share), hourly on-host health check with a 25h freshness bound, RPO 24h. Activation evidence net-kingdom NK-WP-0049-T14 (2026-10-16). Record accepted residual risks G1 (single off-host provider) and G2 (on-host-only freshness detection, watchdog owed by RAPP-TELEMETRY-WP-0001-T04) until 2027-01-31, and the quarterly isolated identity restore drill (net-kingdom NK-WP-0053, first due by 2027-01-31) in BackupPolicy, RTO-RPO matrix and TestEvidence cadence. Requested by net-kingdom (hub message ef2bf2a9); founder decision e4c288d9 resolved 2026-10-23. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 696317@bnt-lap001 Assistant-Session: bab9e511-0915-45b3-926a-2fab552edff6 |
||
|---|---|---|
| .claude/rules | ||
| .forgejo/workflows | ||
| docs | ||
| history | ||
| IncidentPlaybooks | ||
| registry | ||
| RestoreRunbooks | ||
| specs | ||
| TestEvidence | ||
| tools | ||
| workplans | ||
| .custodian-brief.md | ||
| .gitignore | ||
| .repo-classification.yaml | ||
| AGENTS.md | ||
| AssetRegister.yaml | ||
| BackupPickupQueue.md | ||
| BackupPolicy.md | ||
| CLAUDE.md | ||
| DataRegister.yaml | ||
| INTENT.md | ||
| LICENSE | ||
| PanicSheet.md | ||
| README.md | ||
| ResiliencePolicy.md | ||
| RTO-RPO-Matrix.md | ||
| SCOPE.md | ||
| WORK-RECORDS.md | ||
disaster-control
Resilience Control Plane for Coulomb Social / Helix Forge — the single source of truth for business continuity, disaster recovery, cyber recovery, and restore test evidence.
Purpose
Know what exists, what must survive, how it is rebuilt, and whether restore
actually works. See INTENT.md and ResiliencePolicy.md.
Key artifacts
| Path | Purpose |
|---|---|
AssetRegister.yaml |
Infrastructure and backup stream inventory |
DataRegister.yaml |
Data classes and recovery mapping |
ResiliencePolicy.md |
Operating principle, tiers, drill cadence |
BackupPolicy.md |
Backup architecture and monitoring |
RTO-RPO-Matrix.md |
Per-system recovery targets |
BackupPickupQueue.md |
Cross-repo backup implementation tracker |
PanicSheet.md |
One-page emergency reference |
RestoreRunbooks/ |
Recovery procedures |
IncidentPlaybooks/ |
Incident response steps |
TestEvidence/ |
Dated restore drill reports |
Off-site mirror (R10)
This repo must survive loss of the primary Gitea.
| Role | Location | Refresh | Status |
|---|---|---|---|
| Primary | gitea.coulomb.social/coulomb/disaster-control |
git push origin |
operational |
| Mirror | forgejo.coulomb.social/coulomb/disaster-control (private) |
./tools/sync-mirror.sh after push to origin |
operational |
Forgejo runs on railiance01 — independent of CoulombCore/Gitea. See
docs/mirror-sync.md for setup and recovery.
Session orientation
cat .custodian-brief.md
cat INTENT.md
ls workplans/
State Hub sync after workplan edits:
cd ~/state-hub && make fix-consistency REPO=disaster-control