Agent OS · Component · encrypted-database-recovery
Encrypted database backup and isolated restore verification
What it does
Create PostgreSQL custom dumps, encrypt with AES256-GPG, upload to S3-compatible storage with manifests and size checks, and verify restoration in a temporary PostgreSQL container; maintain backup/recovery status.
Core pattern
Encrypted backups and manifests + isolated restore checks
- Input
- Database/container reference, managed encryption reference, bucket and backup object
- Output
- Encrypted dump, manifest, restore status and table count
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | backup | backup · restore_verify · standby_sync · status |
| archive_file | — | — | — |
| retention_days | integer | 30 | 1–3650 |
| schedule | — | — | — |
| dry_run | boolean | true | false · true |
Maturity and limits
backup-postgres.sh executes pg_dump then GPG and uploads/size-checks the object. verify-restore.sh decrypts/restores into a temporary container and requires nonzero public table count. Source inspected statically; tests and external integrations were not executed.
A nonzero table count does not verify business completeness or recovery point/time objectives. Encryption and provider references must be deployment-managed. Daily/weekly/monthly copy policy is currently source-defined.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- EnergyTransferable use
For offline delivery and recovery preparation for site operations software, use encrypted backups and manifests followed by isolated restore checks.
Skills pack
Contract scaffold and deterministic mock
Download · 11KBSHA-256 3a3afe5b5ec8857263c58ddce69af868d28c623a37fba4e6732c9cd955d5221a
Related components
-
Attested release and offline image verification
Signature and manifest checks + offline installation verification
Working 1 pipeline -
Agent application release and operational readiness reporting
Readiness evidence aggregation + graded release gates
Working 1 pipeline -
Verified legacy agent-session migration
Verified history backups + idempotent import and quarantine
Working 1 pipeline -
Allowlisted source distribution and leakage checks
Allowlisted file selection + sensitive-content checks and packaging
Working 1 pipeline