# Backup Runbook

This runbook becomes executable in M6-04. Until then it is the required contract.

1. Verify app/database/Qdrant readiness and available backup space.
2. Create backup ID and incomplete manifest.
3. Export a consistent PostgreSQL backup and record migration revision.
4. Snapshot active Qdrant collections and export aliases plus active embedding/generation profile revisions (never provider credentials).
5. Incrementally copy immutable blobs and parsed artifacts.
6. Generate checksums and file/count inventory.
7. Verify every artifact and mark manifest complete atomically.
8. Copy completed set to protected backup share/off-host target.
9. Trigger an empty-environment restore test according to schedule.

Never include `.env`, plaintext credentials or model provider keys. A partial set is never promoted as latest good backup.