Finish RPF-WP-0019 apps-pg controls and recovery

tenancy.yaml

@@ -6,9 +6,9 @@ services:
   - service: apps-pg
     role: relational-storage-provider
     tenancy:
-      current: { I: 0, A: 0, E: 0, P: "n/a", R: 0, V: 0 }
+      current: { I: 0, A: 0, E: 0, P: "n/a", R: 2, V: 1 }
       target:  { I: 0, A: 0, E: 0, P: "n/a", R: 2, V: 1 }
-      reviewed: "2026-08-17"
+      reviewed: "2026-08-20"
       review_due: "2027-02-17"
       service_class: interactive
       permanent: [I, A, E, P]
@@ -17,14 +17,11 @@ services:
         A: "No tenant context is bound at the database provider."
         E: "Tenant enforcement belongs to each consuming application."
         P: "apps-pg provides P1; a substrate is not itself at a P level."
-        R: "A backup target and 30-day retention are declared in source and
-            not yet applied; no successful backup or restore exists. R stays 0
-            until evidenced, per §13.1 — declared configuration is not an
-            artifact."
-        V: "No recovery exercise or failover evidence exists."
-      gap:
-        R: "RPF-WP-0019 establishes a backup target and declared horizon."
-        V: "Exercise recovery after the backup target is established."
+        R: "Continuous WAL and a completed base backup use the governed
+            30-day object-store path; a scratch restore recovered both
+            consumer databases on 2026-08-20."
+        V: "A separate scratch Cluster restored Ready in 56 seconds; this is
+            single-node recovery evidence, not HA or failover."
     provider:
       capability: data.relational
       profile: s5-application-databases
@@ -41,16 +38,20 @@ services:
           maximum: 2
           conditions:
             - "P2 requires a new dedicated cluster for the consumer."
+          evidence:
+            - "docs/evidence/RPF-WP-0019-isolation-2026-08-20.md"
         R:
-          available: 0
+          available: 2
           maximum: 2
-          conditions:
-            - "A governed backup target must exist before R2 is available."
+          evidence:
+            - "docs/evidence/RPF-WP-0019-backup-restore-2026-08-20.md"
         V:
-          available: 0
+          available: 1
           maximum: 1
           conditions:
-            - "Single-node recovery must be documented and exercised."
+            - "V1 is single-node recovery only; no HA or failover is claimed."
+          evidence:
+            - "docs/evidence/RPF-WP-0019-backup-restore-2026-08-20.md"
 
   - service: forgejo-db
     role: relational-storage-provider