Operator backup: one-command pg_dump + MinIO sync #196

New Issue

2026-06-09T11:28:07-04:00

justin commented

2026-06-09 11:28:07 -04:00

Status: partial · Importance: Critical · Effort: M · Phase: 1–2

Only a documented procedure + per-account ZIP exist; no scripted DB+object dump. For a self-host product this is day-one data-loss exposure.

Non-negotiable: Pulled forward — Critical importance contradicted the old Phase-9 slot. Restore must re-apply privacy state faithfully (NN#3); safety net for NN#8.

Area: Performance & scale · P0 / must-have. From the product backlog gap analysis (docs/BACKLOG.md).

**Status:** partial · **Importance:** Critical · **Effort:** M · **Phase:** 1–2 Only a documented procedure + per-account ZIP exist; no scripted DB+object dump. For a self-host product this is day-one data-loss exposure. **Non-negotiable:** **Pulled forward** — Critical importance contradicted the old Phase-9 slot. Restore must re-apply privacy state faithfully (NN#3); safety net for NN#8. --- _Area: Performance & scale · P0 / must-have. From the product backlog gap analysis (docs/BACKLOG.md)._