{
  "id": "backup_rollback",
  "label": "Backup & Rollback Canonical",
  "phase": "phase-09",
  "category": "delivery_layer",
  "status": "ACTIVE_DH_MIRROR",
  "purpose": "Guarantee recoverability before risky operational mutation.",
  "function": "Create, validate and reference backups, restore commands, rollback scope and recovery evidence.",
  "technology_requirements": [
    {
      "technology": "Backup Rollback Manager",
      "required_for": "Guarantee recoverability before risky operational mutation.",
      "required_by_phase": "phase-09",
      "required_by_category": "backup_rollback",
      "required_by_buckets": [
        "Prerequisites",
        "Installation",
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until Backup Rollback Manager is implemented and validated in the future Execution & Monitoring Panel",
      "validation_command": "MISSING until backup_rollback can prove scope, evidence, execution state and promotion decision",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/backup_rollback.json",
      "status_source": "Documentation Hub + future Execution & Monitoring Panel",
      "blocking_if_missing": true,
      "failure_impact": "A backup that has not proven restore value is theater. This category treats recovery as a tested operational path, not a directory created before a risky command. It keeps rollback from becoming a promise the system cannot cash."
    }
  ],
  "depends_on": [
    "filesystem_operations",
    "database_migration_governance",
    "release_governance"
  ],
  "used_by": [
    "production_deployment_gate",
    "migration_runner",
    "disaster_recovery"
  ],
  "overview": {
    "summary": "Backup & Rollback Canonical owns the recovery contract behind every risky DEVON-DEV operation. It treats backup as operational proof, not as a folder name created to calm the operator.",
    "function": "FUNCTION: Define backup creation, backup target, restore command, rollback scope, integrity check, retention rule and evidence that recovery can actually be performed.",
    "system_position": "Filesystem Operations, Diff / Patch / Replace Engine, Migration Runner and Production Deployment Gate all depend on this category because each of them can create state that must be reversible.",
    "failure_impact": "A backup that has not proven restore value is theater. This category treats recovery as a tested operational path, not a directory created before a risky command. It keeps rollback from becoming a promise the system cannot cash."
  },
  "failure_impact": "A backup that has not proven restore value is theater. This category treats recovery as a tested operational path, not a directory created before a risky command. It keeps rollback from becoming a promise the system cannot cash."
}