1.1 KiB
1.1 KiB
Backup Evidence Status
The Ops health surface reports the sanitized result of deployment-side backup verification. It never reads backup artifacts, provider URLs, credentials, encryption-key references, signing keys, or orchestrator APIs.
The status can be:
verified: a signed coordinated PostgreSQL, object, configuration, and key custody recovery point and its isolated restore drill are current;expired: the retained receipt is no longer fresh enough to authorize a release-changing migration;absent: no signed receipt has been adopted;invalid: the deployment verifier rejected, lost, or only partially received the evidence set.
The panel shows the recovery point and drill identifiers, capture/expiry times,
component count, and measured RPO/RTO. These values help operators find the
private report in the approved evidence store; they are not themselves a
backup. Resolve an absent, expired, or invalid state through the deployment
runbook and govoplan-deploy verify-backup --adopt, then reconcile the runtime
environment. Do not upload provider reports or keys through the application.