sjat eaffd8d900 docs(backup): add backup & DR strategy design (→ ADR-022) ... Data-only restic backups, rebuild-from-code recovery (Model A); central off-cluster pull node (fisi) with 8TB mirror; 3-2-1 via pCloud (rclone) + rotated USB air-gap. Per-service backup__* contract + BACKUP.md as a hard convention. Two-tier restore testing (ubongo container restore-verify + semi-annual staging DR rehearsal). One restic password escrowed to Vaultwarden + paper (restic + vault passwords) for a non-circular break-glass. Dead-man's-switch alerting via Uptime Kuma. Resolves TODO 3.8; grounds ADR-011's backup-first assumption. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-10 11:00:01 +02:00
..
plans	docs(access): implementation plan for ADR-021 operational access	2026-06-09 17:16:49 +02:00
specs	docs(backup): add backup & DR strategy design (→ ADR-022)	2026-06-10 11:00:01 +02:00