3 commits

Author	SHA1	Message	Date
codex	625991469a	feat: vend platform-pg-backup-s3 via AppRole ESO ... Policy and AppRole applied. Store Valid, ExternalSecret SecretSynced. Prefix empty. WAL not enabled.	2026-08-14 20:00:15 +02:00
codex	cbc6398583	note: backup bucket policy enforces platform-pg/ prefix	2026-08-14 19:55:53 +02:00
codex	ddce013cac	approve: CCR-2026-0012; verify scoped backup key in OpenBao ... Founder put ACCESS_KEY/SECRET_KEY. S3 prefix CRUD works. IAM write and ESO apply remain gated. WAL not enabled.	2026-08-14 19:34:40 +02:00