[SLICE 23][CORE-B/F] Implement backup/restore, integrity verification, checkpoint export/import, and disaster-recovery lineage #8

Open
opened 2026-09-08 01:56:59 +00:00 by nsaspy · 0 comments
Owner

Parent epics: #13 #17
Depends on: #37 #39

Goal

Add explicit administrative durability for recovering a Symbolic Memory ledger without turning backups into hidden alternate truth.

Implement:

  • consistent backup/export at an exact ledger frontier/checkpoint;
  • manifest containing schema/backend/projection/redaction/integrity generations;
  • restore into a new/empty store with stable ledger identity policy;
  • authenticated recovery lineage when repairing canonical corruption;
  • integrity scan/checksum verification and structured corrupt/unavailable ranges;
  • distinction among backup, replica, archive, and federation member;
  • retention policy hooks so erased/redacted payload is not unintentionally resurrected from ordinary backup workflows;
  • dry-run/verify-only restore mode.

Acceptance

Backup at frontier F restores canonical history and rebuildable projections deterministically; corrupt backup fails closed; restored archive is not counted as an independent source; recovery lineage is explicit; redacted payload cannot silently reappear from a backup that policy says must honor the redaction generation.

Parent epics: #13 #17 Depends on: #37 #39 ## Goal Add explicit administrative durability for recovering a Symbolic Memory ledger without turning backups into hidden alternate truth. Implement: - consistent backup/export at an exact ledger frontier/checkpoint; - manifest containing schema/backend/projection/redaction/integrity generations; - restore into a new/empty store with stable ledger identity policy; - authenticated recovery lineage when repairing canonical corruption; - integrity scan/checksum verification and structured corrupt/unavailable ranges; - distinction among backup, replica, archive, and federation member; - retention policy hooks so erased/redacted payload is not unintentionally resurrected from ordinary backup workflows; - dry-run/verify-only restore mode. ## Acceptance Backup at frontier F restores canonical history and rebuildable projections deterministically; corrupt backup fails closed; restored archive is not counted as an independent source; recovery lineage is explicit; redacted payload cannot silently reappear from a backup that policy says must honor the redaction generation.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nsaspy/symbolic-memory#8
No description provided.