Split from #8742. The bucket check now runs in the forge process, so it catches a stopped check but not a dead forge. Needs: (1) an independent probe (separate process or host) that reads the bucket and the forge and goes red when either is silent; (2) the snapshot itself taken outside the serving process, or resumable across a release (today a release mid-snapshot is caught up by retaking it whole after boot).
Split from #8742. The bucket check now runs in the forge process, so it catches a stopped check but not a dead forge. Needs: (1) an independent probe (separate process or host) that reads the bucket and the forge and goes red when either is silent; (2) the snapshot itself taken outside the serving process, or resumable across a release (today a release mid-snapshot is caught up by retaking it whole after boot).
Files: src/snapshot/service.ts, src/snapshot/snapshot.ts, scripts/, docs/features/backup-truth.md