Start autonomous Belgium and North Sea RC

2026-07-18 00:12:34 +02:00
parent 9513f8613e
commit 9c402e0df2
36 changed files with 2235 additions and 115 deletions
@@ -11,3 +11,24 @@ Bestanden worden niet stilzwijgend verwijderd. Gebruik soft-delete waar mogelijk

 ## AI/model rollback
 Elke analysis run bewaart model id, version, parameters, confidence threshold en pipeline version.
+# RC backup and isolated restore gate
+
+Before any release migration, credential rotation or image promotion:
+
+1. run `scripts/backup_release_state.sh` against the running all-in-one
+   container;
+2. run `scripts/verify_release_backup.sh` read-only;
+3. run `scripts/restore_release_backup_smoke.sh` with
+   `--confirm-isolated-restore`;
+4. retain the backup directory and the separate restore-smoke JSON with the
+   release evidence.
+
+The restore smoke may only create databases whose name starts with
+`geointel_restore_verify_`. It refuses the production database name, does not
+use `pg_restore --clean` and drops the temporary database unless an operator
+explicitly asks to retain it.
+
+Storage and model files are inventoried rather than copied into the database
+dump. Release backups must therefore be paired with the persistent storage
+volume backup policy. Use `--inventory-mode sha256` for final release
+evidence.