Operationalize RC10 data retention

deploy/unraid/Dockerfile.all-in-one

@@ -142,6 +142,9 @@ COPY scripts/run_split_background_promotion_workflow.sh /app/scripts/run_split_b
 COPY scripts/activate_promoted_yolo_candidate.py /app/scripts/activate_promoted_yolo_candidate.py
 COPY scripts/archive_technical_projects.py /app/scripts/archive_technical_projects.py
 COPY scripts/runtime_state_report.py /app/scripts/runtime_state_report.py
+COPY scripts/release_backup_guard.py /app/scripts/release_backup_guard.py
+COPY scripts/audit_data_operations.py /app/scripts/audit_data_operations.py
+COPY scripts/cleanup_storage_artifacts.py /app/scripts/cleanup_storage_artifacts.py
 COPY deploy/unraid/nginx-all-in-one.conf /etc/nginx/conf.d/default.conf
 COPY deploy/unraid/all-in-one-start.sh /usr/local/bin/geointel-all-in-one-start
 COPY --from=frontend-build /frontend/dist/ /usr/share/nginx/html/
@@ -171,7 +174,7 @@ LABEL org.opencontainers.image.title="GeoIntel" \
       org.opencontainers.image.created="${GEOINTEL_BUILD_TIME}" \
       io.geointel.ai.enabled="${GEOINTEL_INSTALL_AI}"
 
-VOLUME ["/var/lib/postgresql/data", "/app/storage"]
+VOLUME ["/var/lib/postgresql/data", "/app/storage", "/app/backups"]
 
 EXPOSE 80
 

deploy/unraid/README.md

@@ -293,6 +293,24 @@ The configured upload limit is shared by FastAPI and the generated nginx
 runtime configuration. Values outside `1..2048` MiB are rejected before the
 active application is replaced.
 
+## Data operations
+
+`GEOINTEL_BACKUPS_PATH` defaults to
+`/mnt/user/appdata/geointel/backups` and is mounted read-only at
+`/app/backups`. Explicit cleanup commands can therefore verify a recent
+backup without permission to alter it.
+
+These commands are non-mutating:
+
+```bash
+docker exec geointel python /app/scripts/audit_data_operations.py
+docker exec geointel python /app/scripts/cleanup_storage_artifacts.py
+```
+
+The full backup, confirmation, candidate-limit and apply sequence is in
+`docs/DATA_OPERATIONS_RUNBOOK.md`. GeoIntel installs no automatic cleanup
+schedule.
+
 ## Safe cleanup
 
 Safe cache cleanup if Docker build cache fills the Unraid Docker image:

deploy/unraid/geointel-unraid-template.xml

@@ -25,6 +25,7 @@
   <Config Name="Web UI Port" Target="80" Default="1202" Mode="tcp" Description="Host port mapped to the GeoIntel all-in-one web UI. Change this to edit the browser port." Type="Port" Display="always" Required="true" Mask="false">1202</Config>
   <Config Name="Storage Path" Target="/app/storage" Default="/mnt/user/appdata/geointel/storage" Mode="rw" Description="Persistent GeoIntel artifact storage for uploads, tiles, masks, reports and exports." Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/geointel/storage</Config>
   <Config Name="AI Models Path" Target="/app/models" Default="/mnt/user/appdata/geointel/models" Mode="rw" Description="Persistent local model files mounted into the container. GeoIntel never downloads weights automatically." Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/geointel/models</Config>
+  <Config Name="Release Backups Path" Target="/app/backups" Default="/mnt/user/appdata/geointel/backups" Mode="ro" Description="Read-only release backups used to guard explicitly confirmed cleanup operations." Type="Path" Display="advanced" Required="true" Mask="false">/mnt/user/appdata/geointel/backups</Config>
   <Config Name="PostGIS Data Path" Target="/var/lib/postgresql/data" Default="/mnt/user/appdata/geointel/postgres-data" Mode="rw" Description="Persistent embedded PostGIS data directory for the all-in-one container." Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/geointel/postgres-data</Config>
   <Config Name="Postgres Database" Target="GEOINTEL_POSTGRES_DB" Default="geointel" Mode="" Description="Embedded PostGIS database name." Type="Variable" Display="advanced" Required="true" Mask="false">geointel</Config>
   <Config Name="Postgres User" Target="GEOINTEL_POSTGRES_USER" Default="geointel" Mode="" Description="Embedded PostGIS database user." Type="Variable" Display="advanced" Required="true" Mask="false">geointel</Config>

deploy/unraid/geointel.env.example

@@ -10,6 +10,9 @@ GEOINTEL_STORAGE_PATH=/mnt/user/appdata/geointel/storage
 # Local AI model files mounted into the container as /app/models.
 GEOINTEL_MODELS_PATH=/mnt/user/appdata/geointel/models
 
+# Checksum-verified release backups mounted read-only for cleanup guards.
+GEOINTEL_BACKUPS_PATH=/mnt/user/appdata/geointel/backups
+
 # Embedded PostGIS data directory for the all-in-one container.
 GEOINTEL_POSTGIS_DATA_PATH=/mnt/user/appdata/geointel/postgres-data
 

deploy/unraid/run-dockerman-container.sh

@@ -15,6 +15,7 @@ GEOINTEL_FRONTEND_PORT="${GEOINTEL_FRONTEND_PORT:-1202}"
 GEOINTEL_IMAGE="${GEOINTEL_IMAGE:-geointel-all-in-one:latest}"
 GEOINTEL_STORAGE_PATH="${GEOINTEL_STORAGE_PATH:-/mnt/user/appdata/geointel/storage}"
 GEOINTEL_MODELS_PATH="${GEOINTEL_MODELS_PATH:-/mnt/user/appdata/geointel/models}"
+GEOINTEL_BACKUPS_PATH="${GEOINTEL_BACKUPS_PATH:-/mnt/user/appdata/geointel/backups}"
 GEOINTEL_POSTGIS_DATA_PATH="${GEOINTEL_POSTGIS_DATA_PATH:-/mnt/user/appdata/geointel/postgres-data}"
 GEOINTEL_POSTGRES_DB="${GEOINTEL_POSTGRES_DB:-geointel}"
 GEOINTEL_POSTGRES_USER="${GEOINTEL_POSTGRES_USER:-geointel}"
@@ -168,7 +169,7 @@ if docker ps -a --format '{{.Names}}' | grep -qx geointel; then
   docker rm -f geointel
 fi
 
-mkdir -p "$GEOINTEL_STORAGE_PATH" "$GEOINTEL_MODELS_PATH" "$GEOINTEL_POSTGIS_DATA_PATH"
+mkdir -p "$GEOINTEL_STORAGE_PATH" "$GEOINTEL_MODELS_PATH" "$GEOINTEL_BACKUPS_PATH" "$GEOINTEL_POSTGIS_DATA_PATH"
 migrate_compose_volume_if_needed
 
 docker run -d \
@@ -268,6 +269,7 @@ docker run -d \
   -v "${GEOINTEL_POSTGIS_DATA_PATH}:/var/lib/postgresql/data" \
   -v "${GEOINTEL_STORAGE_PATH}:/app/storage" \
   -v "${GEOINTEL_MODELS_PATH}:/app/models" \
+  -v "${GEOINTEL_BACKUPS_PATH}:/app/backups:ro" \
   "$GEOINTEL_IMAGE"
 
 docker ps --filter name=geointel