docs(dr): record Synology hot backup gate #703

Merged

pdurlej merged 1 commit from codex/m02-dr-refresh-synology-gate into main

2026-06-04 11:24:53 +02:00

codex commented

2026-06-04 10:57:06 +02:00

Collaborator

Canary status: not required — metadata report only, no runtime/code/schema path touched.

Summary

Records the first M02 DR refresh after #701.
Confirms MacBook cold/local archive restore-check passed.
Confirms pCloud crypt/offsite restore-check passed.
Records Synology/kip as a hard gate: host is online and SMB reachable, but Keychain/share metadata are not safely resolvable yet, so M02 is BLOCKED rather than green.

Spec sources read

runbooks/dr-restore-test.md — M02/W3 restore expectations.
decisions/0013-offsite-backup-rclone-crypt-pcloud.md — MacBook/Synology/pCloud backup role contract.
state/reports/unique-knowledge-backup-2026-06-04.md — #701 archive/restore evidence.

Tests / evidence

Local archive restore-check: PASS.
pCloud crypt restore-check: PASS.
tailscale status: Synology host KiP / 100.91.208.73 online.
SMB reachability: 100.91.208.73:445 reachable.
Targeted Keychain metadata lookup: not found.
Temporary restore directories removed.
git diff --check.

Runtime impact

No production restore, no service restart, no package update, no destructive host action. Temporary restore roots under /tmp were removed after verification.

Canary status: not required — metadata report only, no runtime/code/schema path touched. ## Summary - Records the first M02 DR refresh after #701. - Confirms MacBook cold/local archive restore-check passed. - Confirms pCloud crypt/offsite restore-check passed. - Records Synology/`kip` as a hard gate: host is online and SMB reachable, but Keychain/share metadata are not safely resolvable yet, so M02 is BLOCKED rather than green. ## Spec sources read - `runbooks/dr-restore-test.md` — M02/W3 restore expectations. - `decisions/0013-offsite-backup-rclone-crypt-pcloud.md` — MacBook/Synology/pCloud backup role contract. - `state/reports/unique-knowledge-backup-2026-06-04.md` — #701 archive/restore evidence. ## Tests / evidence - Local archive restore-check: PASS. - pCloud crypt restore-check: PASS. - `tailscale status`: Synology host `KiP` / `100.91.208.73` online. - SMB reachability: `100.91.208.73:445` reachable. - Targeted Keychain metadata lookup: not found. - Temporary restore directories removed. - `git diff --check`. ## Runtime impact No production restore, no service restart, no package update, no destructive host action. Temporary restore roots under `/tmp` were removed after verification.

codex added 1 commit

2026-06-04 10:57:06 +02:00

docs(dr): record Synology hot backup gate

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

canary-required / canary (pull_request) Has been skipped

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 1m4s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 1m20s

Details

8ba29e4738

codex commented

2026-06-04 10:59:45 +02:00

Author

Collaborator

Patchwarden PR sanity

Status: advisory_findings
PR: 703
Commit: 8ba29e47388606f825976ebd6f5b2c72726d74e4
Security-sensitive label: missing
Authority: advisory model review plus deterministic blockers only
3+3 canary: still alive; this does not replace it

Deterministic findings

No deterministic findings.

Model reviewers

`global-glm` / `glm-5.1:cloud`

Status: ok
Verdict: OK
Findings: none

`global-deepseek` / `deepseek-v4-pro:cloud`

Status: ok
Verdict: OK
Findings: none

`redteam` / `kimi-k2.6:cloud`

Status: ok
Verdict: NOT_OK
medium Infrastructure metadata and PII exposure in git-tracked report
- Evidence: state/reports/m02-dr-refresh-synology-gate-2026-06-04.md contains Tailnet IPv4/IPv6 (100.91.208.73, fd7a:115c:a1e0::f001:d0a8), internal hostname (kasia-i-piotr-synology-nas.tailc34fc0.ts.net), local username/path (/Users/pd/...), and cloud
- Next: Move concrete network identifiers, hostnames, and local paths to a private vault; keep the report structure in git but reference externalized secrets/identifiers.

Policy notes

GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot.
Optional red-team model is enabled only when PLATFORMCTL_PR_SANITY_REDTEAM_MODEL is configured.
Auto-merge is not enabled here.

# Patchwarden PR sanity - Status: `advisory_findings` - PR: `703` - Commit: `8ba29e47388606f825976ebd6f5b2c72726d74e4` - Security-sensitive label: `missing` - Authority: advisory model review plus deterministic blockers only - 3+3 canary: still alive; this does not replace it ## Deterministic findings No deterministic findings. ## Model reviewers ### `global-glm` / `glm-5.1:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `redteam` / `kimi-k2.6:cloud` - Status: `ok` - Verdict: `NOT_OK` - **`medium`** Infrastructure metadata and PII exposure in git-tracked report - Evidence: `state/reports/m02-dr-refresh-synology-gate-2026-06-04.md contains Tailnet IPv4/IPv6 (100.91.208.73, fd7a:115c:a1e0::f001:d0a8), internal hostname (kasia-i-piotr-synology-nas.tailc34fc0.ts.net), local username/path (/Users/pd/...), and cloud` - Next: Move concrete network identifiers, hostnames, and local paths to a private vault; keep the report structure in git but reference externalized secrets/identifiers. ## Policy notes - GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot. - Optional red-team model is enabled only when `PLATFORMCTL_PR_SANITY_REDTEAM_MODEL` is configured. - Auto-merge is not enabled here.