seed: planned Scaleway backup store for WP-0002

Identity, topology, consumer bindings, and the planned attribute file
(region nl-ams, endpoint/bucket still null). Post-purchase fill is
REEF-STORAGE-WP-0002.

substrate/identity.yaml

@@ -0,0 +1,14 @@
+reef_id: reef-storage
+display_name: Railiance delegated object storage
+substrate_kind: object-storage
+ownership_repo: railiance-platform
+lifecycle_state: planned
+criticality: high
+primary_rail: null
+current_members: []
+current_role: Provider-delegated S3-compatible store. Scaleway operates the capability; this reef names the boundary and non-secret attributes.
+source_of_truth:
+  repo: reef-storage
+  paths:
+    - declarations/reef.yaml
+    - substrate/object-stores/platform-audit-storage.yaml

substrate/object-stores/platform-audit-storage.yaml

@@ -1,15 +1,24 @@
-# Planned. Fill after RESOURCE-WP-0002 purchase. No secrets.
+# Planned primary for RESOURCE-WP-0002. Fill endpoint/bucket/prefix after purchase.
+# No secrets in this file.
 schema_version: "0.1"
 resource_id: resource:platform:audit-storage
 provider: Scaleway
+product: standard-multi-az
 status: planned
 endpoint: null
-region: null
+region: nl-ams
 bucket: null
 prefix: null
 versioning: null
 lifecycle: null
 provider_project_ref: null
+intended:
+  public_access: disabled
+  versioning: true
+  lifecycle: 30-day recovery window matching data/demand/platform-audit-storage.json
+  encryption_at_rest: provider-managed
+  identity: bucket-and-prefix scoped key only
 notes:
   - Destination for rapp-postgres WAL and base backups once procured.
   - resource-control cites reef:storage/substrate/object-stores/platform-audit-storage.yaml#<key>
+  - "Decision record: resource-control/docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md"

substrate/topology.yaml

@@ -0,0 +1,21 @@
+reef_id: reef-storage
+membership_policy: Add a member when a purchased object-store (bucket/project) is live. Members are provider resources, not hosts.
+members: []
+intended_members:
+  - member_id: platform-audit-storage
+    role: primary-backup-object-store
+    provider: Scaleway
+    product: standard-multi-az
+    region: nl-ams
+    resource_id: resource:platform:audit-storage
+    status: planned
+    evidence:
+      - repo: resource-control
+        path: docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md
+access_surfaces:
+  - type: s3-https
+    note: Endpoint and bucket are filled after purchase in substrate/object-stores/platform-audit-storage.yaml. No rail.
+unresolved_questions:
+  - Scaleway project/organization id on the paying Railiance (or GmbH) account
+  - Exact bucket name and prefix after create
+  - Whether Host Europe Backup Storage or Nextcloud is the T06 second copy