{
  "schema_version": "backup_dr_target_inventory_v1",
  "generated_at": "2026-06-04T15:38:22+08:00",
  "source_refs": [
    "docs/runbooks/BACKUP-STATUS.md",
    "docs/runbooks/OFFSITE-BACKUP-ESCROW-RUNBOOK.md",
    "scripts/backup/backup-all.sh",
    "scripts/backup/backup-status.sh",
    "scripts/backup/sync-offsite-backups.sh",
    "scripts/backup/verify-offsite-full-sync.sh",
    "scripts/backup/offsite-escrow-evidence-report.sh",
    "scripts/backup/mark-credential-escrow-verified.sh"
  ],
  "program_status": {
    "overall_completion_percent": 88,
    "current_priority": "P1",
    "current_task_id": "P1-101",
    "next_task_id": "P1-102",
    "read_only_mode": true
  },
  "target_taxonomy": {
    "target_types": [
      "database",
      "repository",
      "registry",
      "volume",
      "configuration",
      "route_evidence",
      "ai_artifact",
      "offsite_mirror",
      "credential_escrow",
      "k8s_resource",
      "status_check"
    ],
    "statuses": ["active", "partial", "blocked", "deferred"],
    "gate_statuses": [
      "read_only_allowed",
      "backup_execution_blocked",
      "restore_approval_required",
      "offsite_sync_blocked",
      "credential_approval_required",
      "blocked_by_live_evidence",
      "deferred_until_service_active"
    ],
    "storage_classes": [
      "restic_local",
      "restic_offsite",
      "file_export",
      "velero_minio",
      "evidence_marker",
      "read_only_metric"
    ]
  },
  "rollups": {
    "total_targets": 17,
    "by_status": {
      "active": 14,
      "blocked": 2,
      "deferred": 1
    },
    "by_target_type": {
      "database": 5,
      "repository": 1,
      "registry": 1,
      "volume": 4,
      "configuration": 1,
      "route_evidence": 1,
      "ai_artifact": 1,
      "offsite_mirror": 1,
      "credential_escrow": 1,
      "k8s_resource": 1
    },
    "by_gate_status": {
      "backup_execution_blocked": 13,
      "offsite_sync_blocked": 1,
      "credential_approval_required": 1,
      "blocked_by_live_evidence": 1,
      "deferred_until_service_active": 1
    },
    "blocked_target_ids": [
      "configs_capture",
      "credential_escrow_markers"
    ]
  },
  "backup_targets": [
    {
      "target_id": "gitea",
      "display_name": "Gitea DB + repository dump",
      "target_type": "repository",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-gitea.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/gitea",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像到 rclone remote；子腳本不直接 rclone sync。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "不輸出 Gitea app.ini secret；restore 前需人工批准。",
      "evidence_refs": ["scripts/backup/backup-gitea.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 讀取 freshness / integrity 指標，不直接觸發備份。"
    },
    {
      "target_id": "momo_postgresql",
      "display_name": "MOMO PostgreSQL",
      "target_type": "database",
      "status": "active",
      "risk_level": "high",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-momo.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/momo",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "PostgreSQL credential 保留在 188 momo-db container env；快照不得記錄 secret 值。",
      "evidence_refs": ["scripts/backup/backup-momo.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 對齊 freshness 與 last failure 指標。"
    },
    {
      "target_id": "harbor",
      "display_name": "Harbor registry + DB",
      "target_type": "registry",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-harbor.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/harbor",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "harbor.yml 只進 encrypted restic；不在 API 顯示內容。",
      "evidence_refs": ["scripts/backup/backup-harbor.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 補 registry freshness / integrity surface。"
    },
    {
      "target_id": "awoooi_postgresql_daily",
      "display_name": "AWOOOI PostgreSQL daily full",
      "target_type": "database",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-awoooi.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h full backup",
      "storage_class": "restic_local",
      "storage_ref": "/backup/awoooi",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "舊腳本含 DB credential；新 API 只記 evidence ref，不複製 secret 值。",
      "evidence_refs": ["scripts/backup/backup-awoooi.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 對齊 awoooi_prod / awoooi_dev / k3s_datastore freshness。"
    },
    {
      "target_id": "awoooi_postgresql_frequent",
      "display_name": "AWOOOI PostgreSQL frequent core",
      "target_type": "database",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-awoooi-frequent.sh",
      "schedule": "08:00 / 14:00 / 20:00 或每 6 小時 cron",
      "rpo": "6h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/awoooi",
      "offsite_policy": "由 offsite sync 按 repo 鏡像，不由高頻腳本直接上傳。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "舊腳本含 DB credential；不得把 secret 寫入治理快照或 API。",
      "evidence_refs": ["scripts/backup/backup-awoooi-frequent.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 6h RPO freshness。"
    },
    {
      "target_id": "langfuse",
      "display_name": "Langfuse AI trace DB",
      "target_type": "database",
      "status": "active",
      "risk_level": "high",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-langfuse.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/langfuse",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "DB dump 只進 encrypted restic；API 不顯示 dump 內容。",
      "evidence_refs": ["scripts/backup/backup-langfuse.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 AI trace backup freshness。"
    },
    {
      "target_id": "monitoring",
      "display_name": "Prometheus / Grafana / Alertmanager",
      "target_type": "volume",
      "status": "active",
      "risk_level": "high",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-monitoring.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/monitoring",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "Grafana / Alertmanager 設定只進 encrypted restic；不輸出 secret。",
      "evidence_refs": ["scripts/backup/backup-monitoring.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 對齊 monitoring repo freshness 與 alert rules visibility。"
    },
    {
      "target_id": "signoz",
      "display_name": "SignOz ClickHouse + SQLite",
      "target_type": "volume",
      "status": "active",
      "risk_level": "high",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-signoz.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/signoz",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "腳本會短暫停 collector；Agent 不得任意觸發。",
      "evidence_refs": ["scripts/backup/backup-signoz.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 標出 service-disruptive backup 腳本，避免自動觸發。"
    },
    {
      "target_id": "open_webui",
      "display_name": "Open-WebUI volume",
      "target_type": "volume",
      "status": "active",
      "risk_level": "medium",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-open-webui.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/open-webui",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "volume 內容只進 encrypted restic。",
      "evidence_refs": ["scripts/backup/backup-open-webui.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 freshness 與 188 SSH reachability。"
    },
    {
      "target_id": "clawbot_redis",
      "display_name": "ClawBot Redis volume",
      "target_type": "volume",
      "status": "active",
      "risk_level": "medium",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-clawbot.sh",
      "schedule": "每日 02:00 via backup-all.sh",
      "rpo": "24h",
      "storage_class": "restic_local",
      "storage_ref": "/backup/clawbot",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "BGSAVE / volume export 不顯示 Redis payload。",
      "evidence_refs": ["scripts/backup/backup-clawbot.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 freshness 與 failure-only notification。"
    },
    {
      "target_id": "configs_capture",
      "display_name": "Host / service / K8s configuration capture",
      "target_type": "configuration",
      "status": "blocked",
      "risk_level": "critical",
      "owner_host": "110 with SSH to 188 / 120 / 121 / 125",
      "primary_script": "scripts/backup/backup-configs.sh",
      "schedule": "納入 offsite expected repos；live status 顯示 120 target blocked",
      "rpo": "24h target but currently blocked by live evidence",
      "storage_class": "restic_local",
      "storage_ref": "/backup/configs",
      "offsite_policy": "rclone expected repo includes configs；config capture failure blocks full DR green。",
      "automation_gate_status": "blocked_by_live_evidence",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "Secret / ConfigMap 只進 encrypted restic；不得在 API 顯示內容。",
      "evidence_refs": ["scripts/backup/backup-configs.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 `120-k3s-host-configs` blocked status；不得自動重跑 restore。"
    },
    {
      "target_id": "ai_artifacts",
      "display_name": "AI artifacts / Ollama manifests",
      "target_type": "ai_artifact",
      "status": "active",
      "risk_level": "medium",
      "owner_host": "110 pulls from 188",
      "primary_script": "scripts/backup/backup-ai-artifacts.sh",
      "schedule": "repo expected by offsite sync",
      "rpo": "24h evidence target",
      "storage_class": "restic_local",
      "storage_ref": "/backup/ai-artifacts",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "預設備份 manifests / Modelfile，不備份 large blobs；不輸出 secret。",
      "evidence_refs": ["scripts/backup/backup-ai-artifacts.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 manifest-only policy 與 freshness。"
    },
    {
      "target_id": "public_routes",
      "display_name": "Public routes / DNS / TLS evidence",
      "target_type": "route_evidence",
      "status": "active",
      "risk_level": "high",
      "owner_host": "110 with public read-only probes",
      "primary_script": "scripts/backup/backup-public-routes.sh",
      "schedule": "repo expected by offsite sync",
      "rpo": "24h evidence target",
      "storage_class": "restic_local",
      "storage_ref": "/backup/public-routes",
      "offsite_policy": "sync-offsite-backups.sh 統一鏡像。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "不輸出 registrar / DNS provider token；TLS private keys 由 encrypted configs 備份處理。",
      "evidence_refs": ["scripts/backup/backup-public-routes.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 DNS / TLS evidence freshness。"
    },
    {
      "target_id": "sentry",
      "display_name": "Sentry backup repo",
      "target_type": "volume",
      "status": "deferred",
      "risk_level": "medium",
      "owner_host": "110",
      "primary_script": "scripts/backup/backup-sentry.sh",
      "schedule": "deferred until service is active",
      "rpo": "not active",
      "storage_class": "restic_local",
      "storage_ref": "/backup/sentry",
      "offsite_policy": "included in offsite expected repos when local repo exists。",
      "automation_gate_status": "deferred_until_service_active",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "Sentry volume / env 不在 API 顯示。",
      "evidence_refs": ["scripts/backup/backup-sentry.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "服務重新啟動後再評估 freshness；目前不宣稱 active。"
    },
    {
      "target_id": "offsite_rclone_full_sync",
      "display_name": "Google Drive / rclone offsite mirror",
      "target_type": "offsite_mirror",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "110",
      "primary_script": "scripts/backup/sync-offsite-backups.sh",
      "schedule": "每日 03:00 sync；每日 07:20 verify",
      "rpo": "24h mirror target",
      "storage_class": "restic_offsite",
      "storage_ref": "gdrive:awoooi-backups/restic",
      "offsite_policy": "latest-only remote mirror；full sync 需 enable marker 與 resource preflight。",
      "automation_gate_status": "offsite_sync_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "不讀、不輸出 rclone token 或 provider credential。",
      "evidence_refs": ["scripts/backup/sync-offsite-backups.sh", "scripts/backup/verify-offsite-full-sync.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 offsite marker freshness 與 remote latest-only verify。"
    },
    {
      "target_id": "credential_escrow_markers",
      "display_name": "Credential escrow evidence markers",
      "target_type": "credential_escrow",
      "status": "blocked",
      "risk_level": "critical",
      "owner_host": "110 + external human vault",
      "primary_script": "scripts/backup/mark-credential-escrow-verified.sh",
      "schedule": "人工審查後寫非 secret marker",
      "rpo": "manual review cadence",
      "storage_class": "evidence_marker",
      "storage_ref": "/backup/escrow-evidence/*.last_verified",
      "offsite_policy": "marker 只記非 secret evidence id；credential 本體不進 repo / API。",
      "automation_gate_status": "credential_approval_required",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "禁止 secret、URL、token、password 寫入 marker；只接受短 evidence id。",
      "evidence_refs": ["scripts/backup/mark-credential-escrow-verified.sh", "scripts/backup/offsite-escrow-evidence-report.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-105 起草人工 escrow review 批准包；目前 5/5 marker missing。"
    },
    {
      "target_id": "velero_k8s_resources",
      "display_name": "Velero K8s resource snapshots",
      "target_type": "k8s_resource",
      "status": "active",
      "risk_level": "critical",
      "owner_host": "188 K8s / MinIO",
      "primary_script": "k8s/awoooi-prod/16-cronjob-backup-restore-test.yaml",
      "schedule": "每日 02:00 Velero / restore test path",
      "rpo": "24h",
      "storage_class": "velero_minio",
      "storage_ref": "MinIO bucket: velero",
      "offsite_policy": "MinIO 是備份的備份；仍需獨立 offsite 評估。",
      "automation_gate_status": "backup_execution_blocked",
      "restore_gate_status": "restore_approval_required",
      "secret_policy": "K8s Secret restore / readback 需人工批准；API 不顯示 Secret payload。",
      "evidence_refs": ["docs/runbooks/BACKUP-STATUS.md", "k8s/awoooi-prod/16-cronjob-backup-restore-test.yaml"],
      "next_action": "P1-102 顯示 Velero freshness；P1-105 才處理 restore drill 批准包。"
    }
  ],
  "readiness_surfaces": [
    {
      "surface_id": "backup_status_daily_summary",
      "display_name": "每日備份心跳摘要",
      "script_or_metric": "scripts/backup/backup-status.sh",
      "mode": "read_only",
      "status": "active",
      "evidence_refs": ["scripts/backup/backup-status.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 將 freshness / integrity / restore drill 指標轉成準備度矩陣。"
    },
    {
      "surface_id": "offsite_full_verify",
      "display_name": "Offsite latest-only 驗證",
      "script_or_metric": "scripts/backup/verify-offsite-full-sync.sh --write-textfile",
      "mode": "read_only",
      "status": "active",
      "evidence_refs": ["scripts/backup/verify-offsite-full-sync.sh", "docs/runbooks/BACKUP-STATUS.md"],
      "next_action": "P1-102 顯示 remote snapshots=1 與 verifier freshness。"
    },
    {
      "surface_id": "escrow_evidence_report",
      "display_name": "Offsite / credential escrow evidence report",
      "script_or_metric": "scripts/backup/offsite-escrow-evidence-report.sh",
      "mode": "read_only",
      "status": "blocked",
      "evidence_refs": ["scripts/backup/offsite-escrow-evidence-report.sh", "scripts/backup/mark-credential-escrow-verified.sh"],
      "next_action": "P1-105 產出人工 escrow review 批准包；不得自動寫 marker。"
    }
  ],
  "operation_boundaries": {
    "read_only_api_allowed": true,
    "backup_execution_allowed": false,
    "restore_execution_allowed": false,
    "offsite_sync_execution_allowed": false,
    "credential_marker_write_allowed": false,
    "schedule_change_allowed": false,
    "destructive_prune_allowed": false
  },
  "approval_boundaries": {
    "sdk_installation_allowed": false,
    "paid_api_call_allowed": false,
    "shadow_or_canary_allowed": false,
    "production_routing_allowed": false,
    "destructive_operation_allowed": false
  }
}