Sweep risk inbox and reconcile findings

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
tegwick 2026-09-01 02:41:32 +02:00
parent d65aaf7484
commit 7f1424dbcf
12 changed files with 363 additions and 96 deletions

View file

@ -3,6 +3,7 @@ id: RISK-F-0006
type: finding
title: "apps-pg has no backup configured at all: R0 means no recovery"
status: fixed
owner: risk-nexus
reported_by: railiance-platform
reported_via: flex-auth
routed_by: risk-nexus
@ -22,9 +23,14 @@ fidelity_modifier: false
production_rescore: true
disclosure: public
publication: pending-handover
publication_id: risk-f-0006-apps-pg-no-backup
publication_path: "findings/apps-pg-no-backup/v1/index.html"
publication_subtitle: "A shared production database had no backup or recovery path; encrypted off-host backup and a demonstrated restore closed the gap."
revision: "fixed-1"
last_reviewed: "2026-08-21"
review_interval: 6m
embargo_lifted: "2026-08-20 — backup live, restore demonstrated with matching row counts"
embargo_since: "2026-08-19"
embargo_review: "2026-09-18"
embargo_was_since: "2026-08-19"
escalation: answered
escalation_trigger: 3
escalation_status: answered