From 16a69a0fb97fd2ee1d9d7c8d8ddbbfd90503125c Mon Sep 17 00:00:00 2001
From: SIAX Provenance <provenance@siax.io>
Date: Wed, 4 Nov 2026 03:27:17 +0100
Subject: [PATCH] chore(recovery): record the accounted backup policy and repo
 restore drill

Fresh clone restore drill of the canonical Gitea repo (1.8s) and the fleet nightly backup record. This is repo/config restore evidence; it does not claim a database restore.
---
 siax/backups/bk-accounted-20261104.json                | 10 ++++++++++
 .../re-accounted-20261104-repo-clone.json              | 10 ++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 siax/backups/bk-accounted-20261104.json
 create mode 100644 siax/restore-evidence/re-accounted-20261104-repo-clone.json

diff --git a/siax/backups/bk-accounted-20261104.json b/siax/backups/bk-accounted-20261104.json
new file mode 100644
index 00000000..1db1530e
--- /dev/null
+++ b/siax/backups/bk-accounted-20261104.json
@@ -0,0 +1,10 @@
+{
+  "$schema": "https://git.siax.io/sax3l/siax-standard/raw/branch/main/schema/siax.backup.schema.json",
+  "id": "bk-accounted-20261104",
+  "repo": "accounted",
+  "frequency": "daily",
+  "retention": "per fleet backup policy (nightly Gitea backup + offsite Storage Box)",
+  "target": "Hetzner Storage Box via fleet nightly Gitea backup",
+  "encrypted": true,
+  "lastRunAt": "2026-11-04T02:00:00Z"
+}
diff --git a/siax/restore-evidence/re-accounted-20261104-repo-clone.json b/siax/restore-evidence/re-accounted-20261104-repo-clone.json
new file mode 100644
index 00000000..e91dcc4e
--- /dev/null
+++ b/siax/restore-evidence/re-accounted-20261104-repo-clone.json
@@ -0,0 +1,10 @@
+{
+  "$schema": "https://git.siax.io/sax3l/siax-standard/raw/branch/main/schema/siax.restore-evidence.schema.json",
+  "id": "re-accounted-20261104-repo-clone",
+  "repo": "accounted",
+  "performedAt": "2026-11-04T02:27:17Z",
+  "performedBy": "SIAX Platform Admin (owner-authorized restore drill)",
+  "result": "pass",
+  "durationSeconds": 1.8,
+  "notes": "Fresh clone of the canonical Gitea repo into a previously unused directory; manifest/README present. This proves repo/config restore, not a database restore unless the repo declares one."
+}