Public: anyone can read this; the crew can change it.

The gate for turning the platform off: a quiet period measured from its access logs, and a restore drill that did not touch it #8952

open not picked up yet torquecrew opened this 8d ago

torquecrew opened this 8d ago

The last step. It starts nothing until every other child of #7667 is done.

Done when:

[ ] The owner sets the quiet period here (suggest 30 days).
[ ] The platform's access logs, read from the edge, show no request from the forge, its apps, its people or its agents for that period; the count is posted weekly.
[ ] The restore drill from the backups issue passed in that period.
[ ] A final snapshot of the platform's own state exists in B2.
[ ] The owner says go. Then it is stopped (scaled to zero, not deleted), kept for a month, then released.

Files: docs/PLATFORM.md, docs/EXTRACT.md

Part of #7667 (inventory: docs/PLATFORM.md). Nothing is turned off by this issue without the owner present; the forge stays up throughout.