Verify telemetry essentials recovery from versioned Scaleway archive

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883

docs/credential-lane-designs/telemetry-grafana.md

@@ -40,5 +40,6 @@ Do not delete retained recovery material as an implicit rollback.
 Accepted September 6 evidence: exact read and delivery match; wrong identity,
 namespace and audience denied; sibling/write denied; coding-agent deny wins;
 native login succeeds; anonymous/proxy-header requests denied. See
-../rapp-telemetry/evidence/live/2026-09-06-railiance01.json. Independent backup and
-isolated restore, operator OIDC and public production admission remain open.
+../rapp-telemetry/evidence/live/2026-09-06-railiance01.json. A version-pinned Scaleway essentials archive and isolated application restore
+passed later on September 6; see history/2026-09-06-telemetry-scaleway-recovery.md.
+Recurring backups, operator OIDC and public production admission remain open.

docs/evidence/telemetry-capture-2026-09-06.json

@@ -0,0 +1,18 @@
+{
+  "schema": "rapp-telemetry.capture.v1",
+  "status": "captured",
+  "stage": "encrypted",
+  "helper": "telemetry-capture-018fd2cb75",
+  "images": {
+    "grafana": "docker.io/grafana/grafana@sha256:3600073f45a9895d2e2c4042da0e745819f5b78bf781266952a400c40dcd8d69",
+    "alertmanager": "quay.io/prometheus/alertmanager@sha256:690c7b525f4367aa91f73e2f91c632206d32e97c6384bdbf2fb7a861b420340d"
+  },
+  "source_commit": "37b663953c9522665481ce75fbb5e37f066e55e6",
+  "fence_started_at": "2026-09-06T20:53:38.480651+00:00",
+  "writers_stopped": true,
+  "fence_ended_at": "2026-09-06T20:53:46.007312+00:00",
+  "ciphertext_bytes": 3748952,
+  "ciphertext_sha256": "c039d618674b6fe4bd6815d4fa1f3dbf2f52e845c4af3bd52cffdd39e14d4134",
+  "cleanup_errors": [],
+  "production_resumed": true
+}

docs/evidence/telemetry-primary-2026-09-06.json

@@ -0,0 +1,12 @@
+{
+  "schema": "platform.telemetry-primary-archive.v1",
+  "status": "fetched_pending_restore",
+  "started_at": "2026-09-06T20:54:42.876593+00:00",
+  "destination": "s3://railiance-platform-pg-backup/platform-pg/application-archives/telemetry/2026/09/06/205444-17fc36f5db9e0c198b6681290f02fdc3.tar.age",
+  "ciphertext_sha256": "c039d618674b6fe4bd6815d4fa1f3dbf2f52e845c4af3bd52cffdd39e14d4134",
+  "ciphertext_bytes": 3748952,
+  "version_id": "1788728086280183",
+  "version_pinned": true,
+  "download_hash_matches": true,
+  "finished_at": "2026-09-06T20:54:45.698430+00:00"
+}

docs/evidence/telemetry-recovery-cleanup-2026-09-06.json

@@ -0,0 +1,5 @@
+{
+  "fixture_expired": true,
+  "targets": 12,
+  "targets_up": 12
+}

docs/evidence/telemetry-restore-2026-09-06.json

@@ -0,0 +1,61 @@
+{
+  "schema": "platform.telemetry-recovery.v1",
+  "status": "verified",
+  "started_at": "2026-09-06T21:38:41.340137+00:00",
+  "stage": "application_acceptance",
+  "source_sha256": "c039d618674b6fe4bd6815d4fa1f3dbf2f52e845c4af3bd52cffdd39e14d4134",
+  "source_version": "1788728086280183",
+  "images": {
+    "grafana": "docker.io/grafana/grafana@sha256:3600073f45a9895d2e2c4042da0e745819f5b78bf781266952a400c40dcd8d69",
+    "alertmanager": "quay.io/prometheus/alertmanager@sha256:690c7b525f4367aa91f73e2f91c632206d32e97c6384bdbf2fb7a861b420340d"
+  },
+  "decrypted": true,
+  "sqlite_integrity": "ok",
+  "legacy_database_counts": {
+    "dashboards": 0,
+    "users": 1,
+    "datasources": 2
+  },
+  "provisioning_files_restored": 24,
+  "isolation": "docker internal network; no published ports; internal probe; null notification receiver",
+  "applications_ready": true,
+  "anonymous_denied": true,
+  "proxy_headers_denied": true,
+  "restored_dashboard_count": 20,
+  "restored_datasource_count": 2,
+  "native_admin_login": true,
+  "dashboard_and_datasource_counts_match": true,
+  "alertmanager_fixture_restored": true,
+  "source_commit": "37b663953c9522665481ce75fbb5e37f066e55e6",
+  "startup_diagnostics": [
+    {
+      "component": "probe",
+      "running": true,
+      "exit_code": 0,
+      "oom_killed": false,
+      "flags": []
+    },
+    {
+      "component": "grafana",
+      "running": true,
+      "exit_code": 0,
+      "oom_killed": false,
+      "flags": [
+        "provisioning",
+        "migration",
+        "no such file",
+        "error="
+      ]
+    },
+    {
+      "component": "alertmanager",
+      "running": true,
+      "exit_code": 0,
+      "oom_killed": false,
+      "flags": []
+    }
+  ],
+  "cleanup_errors": [],
+  "plaintext_removed": true,
+  "finished_at": "2026-09-06T21:39:02.475104+00:00"
+}