Harden backup integrity and restore workflows #9

Merged

kleb merged 6 commits from feature/audit-hardening into main

2026-08-09 19:04:15 +02:00

kleb commented

2026-08-09 16:30:50 +02:00

Owner

Summary

harden prune, CBT capture, restore preflight, and rescue target identity invariants
bound write verification, retry listing, image pipelines, and snapshot/tree pagination
add crash-durable state updates, readiness telemetry, durable restore warnings, and cache invalidation
complete multi-volume image restore, TUI maintenance, run pagination, and web/CLI usability flows

Verification

go test -count=1 ./...
go vet ./...
go build ./...
go build -tags webdist ./cmd/kbackupd
selected Go race suites for durability, retry, run history, scheduling, and restore
npm --prefix web run check (58 tests)
npm --prefix web run build
npm --prefix web run e2e (15/15)
pinned Go and TypeScript protobuf regeneration
Windows-native and Debian restore/durability test suites
gofmt and git diff --check

Notes

Existing repository formats remain compatible; new persisted-state behavior is crash-durable and fail-closed.
The pre-existing local data/ directory was not included.
Repository key rotation, automatic destructive retention policy, maintenance notifications, and a durable snapshot catalog remain separate product/design work.

## Summary - harden prune, CBT capture, restore preflight, and rescue target identity invariants - bound write verification, retry listing, image pipelines, and snapshot/tree pagination - add crash-durable state updates, readiness telemetry, durable restore warnings, and cache invalidation - complete multi-volume image restore, TUI maintenance, run pagination, and web/CLI usability flows ## Verification - `go test -count=1 ./...` - `go vet ./...` - `go build ./...` - `go build -tags webdist ./cmd/kbackupd` - selected Go race suites for durability, retry, run history, scheduling, and restore - `npm --prefix web run check` (58 tests) - `npm --prefix web run build` - `npm --prefix web run e2e` (15/15) - pinned Go and TypeScript protobuf regeneration - Windows-native and Debian restore/durability test suites - `gofmt` and `git diff --check` ## Notes - Existing repository formats remain compatible; new persisted-state behavior is crash-durable and fail-closed. - The pre-existing local `data/` directory was not included. - Repository key rotation, automatic destructive retention policy, maintenance notifications, and a durable snapshot catalog remain separate product/design work.

kleb added 1 commit

2026-08-09 16:30:50 +02:00

Harden backup integrity and restore workflows 675e865260

kAgent commented

2026-08-09 16:30:51 +02:00

Collaborator

kReview review

Verdict: no findings

No findings to address in the reviewed diff.

No findings to address across the reviewed diff.

Excluded as generated or vendored (not reviewed): build/windows/Build-WinPE.ps1, build/windows/README.md.

Reviewed by kReview at 9f2bceeaa3. This comment is conservative and based only on the PR diff, metadata, and supplied repository context.

Est. cost ~$44.03 total (16.7M in / 64.6k out) · this run ~$4.63 (2.6M in / 6.9k out) / gpt-5.6-sol.

## kReview review **Verdict:** no findings No findings to address in the reviewed diff. No findings to address across the reviewed diff. _Excluded as generated or vendored (not reviewed):_ `build/windows/Build-WinPE.ps1`, `build/windows/README.md`. _Reviewed by kReview at `9f2bceeaa3`. This comment is conservative and based only on the PR diff, metadata, and supplied repository context._ _Est. cost ~$44.03 total (16.7M in / 64.6k out) · this run ~$4.63 (2.6M in / 6.9k out) / gpt-5.6-sol._

kleb added 1 commit

2026-08-09 17:05:17 +02:00

Address audit review findings 3b60e88da0

kleb added 1 commit

2026-08-09 17:40:11 +02:00

Harden target binding and persistence recovery a9b7e24974

kleb added 1 commit

2026-08-09 18:02:13 +02:00

Verify restore identity from opened device fb614eeafe

kleb added 1 commit

2026-08-09 18:19:38 +02:00

Bind Windows system restore to disk identity 8f74702585