Handle becomes secret:railiance-platform/backup. IAM application is resource-control; policy and API key are Scoped backup access.
Updated by fix-consistency on 2026-08-14: - workplan status: ready → active
Publish the operational reference convention (reef: and secret: handles). Add a resource-control view of reef-railiance that excludes S3. Open RESOURCE-WP-0006 for the five-facet inventory model.