diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 0854812f..7057b48d 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -534,6 +534,8 @@ jobs:
                 ;;
               ops/monitoring/alerts-unified.yml)
                 ;;
+              ops/monitoring/alerts.yml)
+                ;;
               scripts/dev/awoooi-navigation-coverage-guard.py)
                 ;;
               scripts/ci/wait-host-web-build-pressure.sh)
@@ -544,18 +546,28 @@ jobs:
               # require the host Docker socket.
               scripts/backup/backup-awoooi-frequent.sh)
                 ;;
+              scripts/backup/backup-status.sh)
+                ;;
               scripts/backup/gitea-repo-bundle-backup.sh)
                 ;;
+              scripts/backup/tests/test_backup_status_contract.py)
+                ;;
+              scripts/ops/backup-alert-label-contract-check.py)
+                ;;
               scripts/ops/backup-health-textfile-exporter.py)
                 ;;
               scripts/ops/tests/test_backup_health_textfile_exporter.py)
                 ;;
+              scripts/ops/tests/test_host_pressure_alert_contract.py)
+                ;;
               scripts/reboot-recovery/deploy-to-110.sh)
                 ;;
               scripts/reboot-recovery/deploy-to-188.sh)
                 ;;
               scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)
                 ;;
+              scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)
+                ;;
               scripts/reboot-recovery/awoooi-startup.sh)
                 ;;
               scripts/reboot-recovery/awoooi-startup.service)
@@ -774,9 +786,11 @@ jobs:
               ../../scripts/reboot-recovery/momo-source-arrival-gate.py \
               ../../scripts/reboot-recovery/reboot-auto-recovery-slo-scorecard.py \
               ../../scripts/ops/backup-health-textfile-exporter.py \
+              ../../scripts/ops/backup-alert-label-contract-check.py \
               ../../scripts/security/gitea-private-inventory-p0-scorecard.py \
               ../../scripts/security/gitea-authenticated-inventory-payload-validator.py
             python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts-unified.yml')); print('alerts-unified YAML OK')"
+            python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts.yml')); print('alerts YAML OK')"
             bash -n \
               ../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh \
               ../../ops/runner/check-awoooi-non110-runner-readiness.sh \
@@ -801,7 +815,9 @@ jobs:
               ../../scripts/reboot-recovery/repair-110-ssh-publickey-auth-local.sh \
               ../../scripts/reboot-recovery/verify-cold-start-monitor-deploy.sh \
               ../../scripts/backup/backup-awoooi-frequent.sh \
+              ../../scripts/backup/backup-status.sh \
               ../../scripts/backup/gitea-repo-bundle-backup.sh
+            bash -n ../../scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh
             DATABASE_URL="${DATABASE_URL:-postgresql+asyncpg://ci:ci@localhost/ci}" \
             PYTHONFAULTHANDLER=1 python3.11 -m pytest \
               tests/test_agent_replay_normalizer.py \
@@ -847,7 +863,9 @@ jobs:
               ../../ops/runner/test_install_awoooi_non110_runner_user_service.py \
               ../../ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py \
               ../../ops/runner/test_verify_awoooi_non110_cd_closure.py \
+              ../../scripts/backup/tests/test_backup_status_contract.py \
               ../../scripts/ops/tests/test_backup_health_textfile_exporter.py \
+              ../../scripts/ops/tests/test_host_pressure_alert_contract.py \
               ../../scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py \
               ../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py \
               ../../scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py \
diff --git a/ops/runner/test_cd_controlled_runtime_profile.py b/ops/runner/test_cd_controlled_runtime_profile.py
index a46b16bf..385ea9d1 100644
--- a/ops/runner/test_cd_controlled_runtime_profile.py
+++ b/ops/runner/test_cd_controlled_runtime_profile.py
@@ -104,11 +104,19 @@ def test_backup_freshness_sources_stay_on_controlled_runtime_profile() -> None:
     text = _workflow_text()
     expected_sources = [
         "scripts/backup/backup-awoooi-frequent.sh)",
+        "scripts/backup/backup-status.sh)",
         "scripts/backup/gitea-repo-bundle-backup.sh)",
+        "scripts/backup/tests/test_backup_status_contract.py)",
+        "scripts/ops/backup-alert-label-contract-check.py)",
         "scripts/ops/backup-health-textfile-exporter.py)",
         "scripts/ops/tests/test_backup_health_textfile_exporter.py)",
+        "scripts/ops/tests/test_host_pressure_alert_contract.py)",
         "../../scripts/backup/backup-awoooi-frequent.sh",
+        "../../scripts/backup/backup-status.sh",
+        "../../scripts/backup/tests/test_backup_status_contract.py",
+        "../../scripts/ops/backup-alert-label-contract-check.py",
         "../../scripts/ops/tests/test_backup_health_textfile_exporter.py",
+        "../../scripts/ops/tests/test_host_pressure_alert_contract.py",
     ]
     for source in expected_sources:
         assert source in text
@@ -697,6 +705,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "docs/runbooks/FULL-STACK-COLD-START-SOP.md)",
         "docs/workplans/2026-06-04-reboot-cold-start-backup-recovery-workplan.md)",
         "ops/monitoring/alerts-unified.yml)",
+        "ops/monitoring/alerts.yml)",
         "ops/runner/awoooi-cd-lane-drain.service)",
         "ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh)",
         "ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py)",
@@ -704,6 +713,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/ops/backup-health-textfile-exporter.py)",
         "scripts/reboot-recovery/deploy-to-110.sh)",
         "scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)",
+        "scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)",
         "scripts/reboot-recovery/post-start-quick-check.sh)",
         "scripts/reboot-recovery/reboot-recovery-readiness-audit.sh)",
         "scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)",
@@ -726,9 +736,11 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../scripts/ops/backup-health-textfile-exporter.py",
         "../../scripts/backup/gitea-repo-bundle-backup.sh",
         "../../ops/monitoring/alerts-unified.yml",
+        "../../ops/monitoring/alerts.yml",
         "../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh",
         "../../scripts/reboot-recovery/deploy-to-110.sh",
         "../../scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh",
+        "../../scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh",
         "../../scripts/reboot-recovery/post-start-quick-check.sh",
         "../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh",
         "../../scripts/reboot-recovery/full-stack-cold-start-check.sh",