docs(adr): ADR-0013 offsite+local backup — rclone-crypt pCloud (supersedes #569) #697

Merged

pdurlej merged 1 commit from claude/adr-0013-offsite-backup into main

2026-06-04 00:36:59 +02:00

claude commented

2026-06-02 23:39:17 +02:00

Collaborator

Reworked ADR-0013 for offsite+local backup of the platform's unique knowledge.

Supersedes #569 (Synology-specific). Topology: RS2000 -> local copy [MacBook cold | Synology hot] + pCloud offsite via rclone crypt.

Research finding baked in: pCloud's built-in Crypto is NOT API-accessible -> not automatable; rclone-crypt-on-a-plain-folder gives the same zero-knowledge guarantee but scriptable. Backup set = unique knowledge only (~few GB). Folds into Phase-1 (#674).

Reworked ADR-0013 for offsite+local backup of the platform's unique knowledge. Supersedes #569 (Synology-specific). Topology: RS2000 -> local copy [MacBook cold | Synology hot] + pCloud offsite via **rclone crypt**. **Research finding baked in:** pCloud's built-in Crypto is NOT API-accessible -> not automatable; rclone-crypt-on-a-plain-folder gives the same zero-knowledge guarantee but scriptable. Backup set = unique knowledge only (~few GB). Folds into Phase-1 (#674).

claude added 1 commit

2026-06-02 23:39:17 +02:00

docs(adr): ADR-0013 offsite+local backup via rclone-crypt pCloud (supersedes #569 )

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 5s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

canary-required / canary (pull_request) Successful in 14s

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 18s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 1m5s

Details

67147faf79

claude referenced this pull request

2026-06-02 23:39:18 +02:00

WIP: ops: ADR-0013 4th replica — Synology + encrypted pCloud #569

codex commented

2026-06-02 23:41:11 +02:00

Collaborator

Patchwarden PR sanity

Status: advisory_findings
PR: 697
Commit: 67147faf79b98c052b0eb48b21bf5941b6cc55b3
Security-sensitive label: missing
Authority: advisory model review plus deterministic blockers only
3+3 canary: still alive; this does not replace it

Deterministic findings

info sensitive-path-touched Sensitive path touched — decisions/0013-offsite-backup-rclone-crypt-pcloud.md
- Evidence: decisions/0013-offsite-backup-rclone-crypt-pcloud.md
- Next: Route through the existing 3+3/risk-tier process; model review remains advisory.

Model reviewers

`global-glm` / `glm-5.1:cloud`

Status: ok
Verdict: OK
Findings: none

`global-deepseek` / `deepseek-v4-pro:cloud`

Status: ok
Verdict: OK
Findings: none

`redteam` / `kimi-k2.6:cloud`

Status: ok
Verdict: NOT_OK
high rclone.conf credential leak footgun
- Evidence: decisions/0013-offsite-backup-rclone-crypt-pcloud.md states 'The rclone-crypt key is itself a secret → stored in Infisical / the operator's keychain, never in the repo' but omits that rclone persists the pCloud API bearer token and (if conf
- Next: Add explicit requirement: treat rclone.conf as a secret (chmod 600, never committed, .gitignore) or avoid disk persistence by configuring rclone entirely via RCLONE_CONFIG_* environment variables injected from Infisical at runtime.

Policy notes

GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot.
Optional red-team model is enabled only when PLATFORMCTL_PR_SANITY_REDTEAM_MODEL is configured.
Auto-merge is not enabled here.

# Patchwarden PR sanity - Status: `advisory_findings` - PR: `697` - Commit: `67147faf79b98c052b0eb48b21bf5941b6cc55b3` - Security-sensitive label: `missing` - Authority: advisory model review plus deterministic blockers only - 3+3 canary: still alive; this does not replace it ## Deterministic findings - **`info` `sensitive-path-touched`** Sensitive path touched — `decisions/0013-offsite-backup-rclone-crypt-pcloud.md` - Evidence: `decisions/0013-offsite-backup-rclone-crypt-pcloud.md` - Next: Route through the existing 3+3/risk-tier process; model review remains advisory. ## Model reviewers ### `global-glm` / `glm-5.1:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `redteam` / `kimi-k2.6:cloud` - Status: `ok` - Verdict: `NOT_OK` - **`high`** rclone.conf credential leak footgun - Evidence: `decisions/0013-offsite-backup-rclone-crypt-pcloud.md states 'The rclone-crypt key is itself a secret → stored in Infisical / the operator's keychain, never in the repo' but omits that rclone persists the pCloud API bearer token and (if conf` - Next: Add explicit requirement: treat rclone.conf as a secret (chmod 600, never committed, .gitignore) or avoid disk persistence by configuring rclone entirely via RCLONE_CONFIG_* environment variables injected from Infisical at runtime. ## Policy notes - GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot. - Optional red-team model is enabled only when `PLATFORMCTL_PR_SANITY_REDTEAM_MODEL` is configured. - Auto-merge is not enabled here.