116 lines
2.9 KiB
JSON
116 lines
2.9 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"generated_at": "2026-06-13T13:10:53+08:00",
|
|
"timezone": "Asia/Taipei",
|
|
"scope": "credential_escrow_evidence_owner_request",
|
|
"source_evidence": {
|
|
"host": "192.168.0.110",
|
|
"commands": [
|
|
"/backup/scripts/mark-credential-escrow-verified.sh --status",
|
|
"/backup/scripts/offsite-escrow-evidence-report.sh --no-color"
|
|
],
|
|
"script_missing_count": 0,
|
|
"offsite_configured": 1,
|
|
"rclone_configured": 1,
|
|
"b2_configured": 0,
|
|
"readiness_require_configured_blocked": 0,
|
|
"partial_marker_present": 1,
|
|
"full_marker_present": 1,
|
|
"escrow_missing_count": 5,
|
|
"summary": {
|
|
"pass": 8,
|
|
"warn": 5,
|
|
"blocked": 0
|
|
}
|
|
},
|
|
"missing_items": [
|
|
{
|
|
"item": "restic_repository_password",
|
|
"allowed_evidence_id_types": [
|
|
"password_manager_item_id",
|
|
"sealed_envelope_id",
|
|
"recovery_checklist_id"
|
|
],
|
|
"status": "missing"
|
|
},
|
|
{
|
|
"item": "offsite_provider_credentials",
|
|
"allowed_evidence_id_types": [
|
|
"vault_item_id",
|
|
"provider_credential_record_id",
|
|
"offsite_access_checklist_id"
|
|
],
|
|
"status": "missing"
|
|
},
|
|
{
|
|
"item": "break_glass_admin_credentials",
|
|
"allowed_evidence_id_types": [
|
|
"break_glass_credential_record_id",
|
|
"sealed_envelope_id",
|
|
"emergency_access_checklist_id"
|
|
],
|
|
"status": "missing"
|
|
},
|
|
{
|
|
"item": "dns_registrar_recovery",
|
|
"allowed_evidence_id_types": [
|
|
"registrar_recovery_checklist_id",
|
|
"vault_item_id",
|
|
"domain_recovery_record_id"
|
|
],
|
|
"status": "missing"
|
|
},
|
|
{
|
|
"item": "oauth_ai_provider_recovery",
|
|
"allowed_evidence_id_types": [
|
|
"provider_recovery_checklist_id",
|
|
"vault_item_id",
|
|
"provider_account_recovery_record_id"
|
|
],
|
|
"status": "missing"
|
|
}
|
|
],
|
|
"forbidden_values": [
|
|
"password",
|
|
"token",
|
|
"api_key",
|
|
"private_key",
|
|
"ssh_key",
|
|
"cookie",
|
|
"session",
|
|
"authorization_header",
|
|
"oauth_client_secret",
|
|
"refresh_token",
|
|
"otp_seed",
|
|
"recovery_code",
|
|
"backup_code",
|
|
"database_url_with_credentials",
|
|
"secret_hash",
|
|
"secret_prefix",
|
|
"secret_suffix",
|
|
"partial_token",
|
|
"unredacted_screenshot",
|
|
"placeholder"
|
|
],
|
|
"progress": {
|
|
"owner_request_package_percent": 80,
|
|
"owner_external_verification_percent": 0,
|
|
"dry_run_validation_percent": 0,
|
|
"marker_write_percent": 0,
|
|
"dr_closeout_verification_percent": 0
|
|
},
|
|
"gates": {
|
|
"runtime_execution_authorized": false,
|
|
"secret_value_collection_authorized": false,
|
|
"marker_write_completed": false,
|
|
"dr_scorecard_complete": false
|
|
},
|
|
"done_criteria": [
|
|
"ESCROW_MISSING_COUNT=0",
|
|
"awoooi_backup_dr_credential_escrow_missing_count=0",
|
|
"backup-status escrow_missing=0",
|
|
"BackupCredentialEscrowEvidenceMissing not firing",
|
|
"cold-start WARN=0 BLOCKED=0"
|
|
]
|
|
}
|