Skip to content

chore: establish production deployment and recovery operations - #41

Merged
Walter-byte merged 4 commits into
mainfrom
chore/p7.2-p7.3-production-operations
Sep 16, 2026
Merged

Walter-byte merged 4 commits into
mainfrom
chore/p7.2-p7.3-production-operations

Conversation

@Walter-byte

Copy link
Copy Markdown
Owner

Implements P7.2 and P7.3 repository-side production operations.

P7.2:

  • separates privileged migration identity from restricted wctm_runtime
  • adds deterministic revision-locked deployment
  • keeps backend startup migration-free
  • adds runtime-role verification
  • adds safe PostgreSQL/Redis immutable-image reconciliation

P7.3:

  • adds verified PostgreSQL backup/checksum/metadata
  • adds conservative retention
  • adds provider-neutral off-host transfer with remote SHA-256 integrity verification
  • adds daily systemd scheduling templates
  • adds isolated restore and disaster-recovery procedures
  • documents APP encryption-key recovery requirements and target RPO/RTO

Repository validation passed, including disposable migration/backup/restore tests and same-size/different-content off-host corruption rejection.

@Walter-byte
Walter-byte merged commit 7591322 into main Sep 16, 2026
1 check passed
@Walter-byte
Walter-byte deleted the chore/p7.2-p7.3-production-operations branch September 16, 2026 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant