Advance blocked assurance and operator callback work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883

assurance/recovery-evidence.json

@@ -0,0 +1,15 @@
+{
+  "schema": "railiance-platform.recovery-evidence.v1",
+  "receipts": [
+    {
+      "signal": "apps-pg.restore",
+      "path": "docs/evidence/scaleway-primary-restore-2026-09-06.json",
+      "sha256": "c9f7c64011f909033f9e8c074adbad0831ec3ef616997225163d34b075b35739"
+    },
+    {
+      "signal": "forgejo-db.restore",
+      "path": "docs/evidence/forgejo-scaleway-restore-2026-09-06.json",
+      "sha256": "071a732318a55a8ca152d90b7a4cd70644728f94ce2753ab73d1c94ba2a26114"
+    }
+  ]
+}

assurance/service-contract.json

@@ -91,6 +91,10 @@
     "eso.refresh": {
       "owner": "railiance-platform",
       "max_age_seconds": 3600
+    },
+    "forgejo-db.restore": {
+      "owner": "railiance-platform",
+      "max_age_seconds": 2592000
     }
   }
 }

assurance/service-records.json

@@ -140,7 +140,7 @@
       "consumers": [
         "forgejo"
       ],
-      "failure_domain": "source host plus separately encrypted Nextcloud copy",
+      "failure_domain": "source host, Scaleway full archive and native database backup, independent encrypted Nextcloud essentials copy",
       "availability": {
         "status": "unsupported",
         "target": null,
@@ -156,12 +156,12 @@
         "target_seconds": null,
         "decision_owner": "railiance-platform + railiance-forge"
       },
-      "retention": "Nextcloud secondary account: 10 GiB total; 14 daily + 4 weekly is an unfulfilled target at the measured 5.35 GB/archive size",
+      "retention": "Scaleway native database: 30 days. Nextcloud essentials: proposed 7 daily + 2 weekly within 10 GiB; scheduled tier/retention cutover remains pending in RPF-WP-0038-T04.",
       "existing_evidence": "docs/forgejo-backup.md",
       "recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
       "maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
       "freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
-      "requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof. Scaleway is the selected primary provider, but no Forgejo primary archive or native database destination is evidenced; coverage remains incomplete."
+      "requirement_assessment": "Scaleway native Forgejo database recovery and full application archive recovery passed on 2026-09-06; independent Nextcloud essentials recovery passed with packages disabled. See RPF-WP-0038 evidence. No accepted numeric availability/RPO/RTO guarantees or recurring tiered archive cadence are established."
     },
     {
       "service": "cnpg-option-a",