Backup Runbook

This runbook becomes executable in M6-04. Until then it is the required contract.

Verify app/database/Qdrant readiness and available backup space.
Create backup ID and incomplete manifest.
Export a consistent PostgreSQL backup and record migration revision.
Snapshot active Qdrant collections and export aliases plus active embedding/generation profile revisions (never provider credentials).
Incrementally copy immutable blobs and parsed artifacts.
Generate checksums and file/count inventory.
Verify every artifact and mark manifest complete atomically.
Copy completed set to protected backup share/off-host target.
Trigger an empty-environment restore test according to schedule.

Never include .env, plaintext credentials or model provider keys. A partial set is never promoted as latest good backup.