Initial curated RAGcore source from c16667f0c9397e2bfc8dd0255b114fba23c8d05e

runbooks/BACKUP.md

@@ -0,0 +1,15 @@
+# Backup Runbook
+
+This runbook becomes executable in M6-04. Until then it is the required contract.
+
+1. Verify app/database/Qdrant readiness and available backup space.
+2. Create backup ID and incomplete manifest.
+3. Export a consistent PostgreSQL backup and record migration revision.
+4. Snapshot active Qdrant collections and export aliases plus active embedding/generation profile revisions (never provider credentials).
+5. Incrementally copy immutable blobs and parsed artifacts.
+6. Generate checksums and file/count inventory.
+7. Verify every artifact and mark manifest complete atomically.
+8. Copy completed set to protected backup share/off-host target.
+9. Trigger an empty-environment restore test according to schedule.
+
+Never include `.env`, plaintext credentials or model provider keys. A partial set is never promoted as latest good backup.