tegwick
2c2a6073ff
T06: optimization-case schema, fail-closed evaluator, cadence and decision template. Every option including the baseline must present all ten decision fields; one unknown blocks the comparison. Validated on the storage case (Hetzner computes and loses to Scaleway by EUR 29.14/month on operator labour; Host Europe blocks on four named gaps) and on the non-storage reef-railiance k3s rightsizing case (low utilization is real, but nothing is costable while the railiance01 price is unknown). T07: portfolio report over coverage, lifecycle, utilization, cost, renewals, risks, open cases, and next actions, derived only from committed evidence. Portfolio spend is reported null rather than as a partial sum, unattributed cost is a named list rather than a spread, and unmeasurable resources are reported rather than dropped. RESOURCE-WP-0003 is finished; both cases remain blocked_on_evidence against live delegated records in other repositories. RESOURCE-WP-0002 is untouched. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
4.3 KiB
4.3 KiB
Object-storage provider due diligence — 2026-08-10
Status vocabulary: yes, no, unknown, or test. Test means documentation
is promising but the live CNPG/Barman preflight remains mandatory.
| Requirement | Host Europe Cloud Storage | Scaleway Standard Multi-AZ | Hetzner Object Storage |
|---|---|---|---|
| Currently orderable for account | unknown — written confirmation required | yes | yes |
| S3-compatible HTTPS / SigV4 | unknown | yes / test | yes / test |
| EU region considered | unknown | Amsterdam nl-ams |
Nuremberg nbg1 |
| Different provider from reef-railiance | no | yes | yes |
| Multi-AZ / availability | unknown | yes; 99.9% service availability | unknown; docs describe Ceph and infrastructure redundancy, not a quantified service SLA |
| Published durability | unknown | 99.999999999% | unknown |
| Scoped access key | unknown | yes; bucket policy test required | yes; key defaults to all project buckets, bucket policy required |
| Private bucket | unknown | yes | yes |
| Multipart/list/get/put/delete | unknown | yes / test | yes / test |
| Versioning | unknown | yes | yes |
| Lifecycle expiration | unknown | yes | yes |
| Object lock | unknown | yes; cannot later disable | yes; enable at bucket creation |
| TLS encryption | unknown | yes; enforceable by bucket policy | yes / test |
| Encryption at rest | unknown | yes: SSE-ONE, SSE-C, or SSE-KMS | no default; SSE-C is documented |
| Initial 100 GiB without long commitment | unknown | yes, usage-based | yes, hourly base billing |
| Operations pricing | unknown | no separate request charge found; confirm invoice model | PUT/GET/DELETE free |
| Storage / egress pricing | unknown | €0.01606/GB-month; 75 GB egress free, then €0.01/GB | €6.49 minimum includes 1 TB storage and 1 TB egress; excess prices still to capture |
| Cancellation / support terms | unknown | contract review required | contract review required |
| Provider status visibility | unknown | yes | yes |
| CNPG 1.25/Barman compatibility | unknown | test | test |
Evidence
- Host Europe Backup Storage supports FTP, SCP, SFTP, and rsync, so it is a secondary logical-copy candidate, not the primary Barman object store: https://www.hosteurope.de/faq/server/virtual-server/backup-storage/
- Host Europe's S3 claim is currently only backed by an older specification: https://www.hosteurope.de/download/PVL/Preis_und_Leistungsverzeichnis_CloudStorage_1-0-1.pdf
- Scaleway pricing: https://www.scaleway.com/en/pricing/storage/
- Scaleway capabilities and durability: https://www.scaleway.com/en/object-storage/
- Scaleway regions/lifecycle/multipart: https://www.scaleway.com/en/docs/object-storage/concepts/
- Scaleway object lock: https://www.scaleway.com/en/docs/object-storage/how-to/use-object-lock/
- Hetzner overview, endpoints, quotas, operations, and limits: https://docs.hetzner.com/storage/object-storage/overview/
- Hetzner supported S3 actions and encryption limitation: https://docs.hetzner.com/storage/object-storage/supported-actions/
- Hetzner encryption FAQ: https://docs.hetzner.com/storage/object-storage/faq/general/
- CNPG 1.25 S3-compatible endpoint and lifecycle guidance: https://cloudnative-pg.io/docs/1.25/appendixes/object_stores/
Blocking evidence requests
- Host Europe: ask account support to confirm current orderability, endpoint, region, SigV4, supported API, versioning/lifecycle, encryption, durability, availability, price, support, and cancellation terms in writing.
- Scaleway and Hetzner: obtain account-visible contractual/support terms and confirm tax treatment. Capture Hetzner excess prices.
- Run a disposable live preflight for each finalist: private bucket, scoped positive and negative credentials, multipart CRUD, versioning/lifecycle, Barman empty-WAL-archive check, and deletion/exit behavior.
Provisional conclusion
Host Europe is not selectable as primary while current S3 orderability is unknown. Hetzner fails the current acceptance requirement for provider-managed encryption at rest unless client-side/SSE-C custody is explicitly accepted. Scaleway Standard Multi-AZ is therefore the provisional primary, subject to a live Barman preflight, contract review, and human purchase approval. Hetzner remains a price comparator; Host Europe Backup Storage or the governed Nextcloud lane remains the independent logical-copy candidate.