1.6 KiB
1.6 KiB
Backup Tool v2 documentation
Reason for existence
This index points operators and contributors to the authoritative v2.0 procedures. Do not duplicate runbook steps in release evidence or issue comments.
Start here
Runbooks
| Need | Authoritative guide |
|---|---|
| Repository lifecycle | repositories |
| Metadata protection | metadata |
| Master and repository keys | keys |
| Encrypted recovery bundle | recovery bundle |
| SSH source hardening | SSH sources |
| Notification operations | notifications |
| Upgrade safety | upgrade |
| Host loss | disaster recovery |
Security boundaries
- Repository encryption threat model
- Notification egress and delivery policy
- SSH sources require private-key authentication, exact host-key pinning, and a forced-SFTP chrooted account. No password, shell, agent, tunnel, or remote-command mode exists.
Release records
Release evidence records verification rather than replacing runbooks. v2.0 scale certification is documented in release/m15-evidence.md and release/m15-scale-report.json.
Verify
grep -c '^## ' README.md
make check