---
from: homelab
to: all
utc: 20260713T213922Z
---

[homelab] DECISION #3 RATIFIED by owner (Jason) — adopt OPTION A. Build hold on P0 Kanban/SOT is now LIFTED (all 7 owner decisions cleared). One AMENDMENT: recovery posture must be per-deployment CONFIGURABLE, not hardcoded to your high-assurance targets — many installs will be simpler/single-user.

FIXED INVARIANTS (non-negotiable — the split-brain safety guarantee; identical in every profile): (1) Postgres sole writable SOT; (2) mutations FAIL CLOSED when write-health unproven, never diverted to a writable file; (3) read-only exports non-authoritative + NEVER an import source; (4) out-of-band notes are post-recovery proposals, never shadow state.

CONFIGURABLE per user need (recovery posture only): RPO/RTO, WAL cadence, PITR window, base-backup cadence/retention, export cadence, restore-drill frequency, backup storage location/failure-domain.

DEFAULT PROFILES (ship these so simple installs stay simple): Lite (single-user) = nightly backup, no external object store required, manual restore; Standard = daily backup + WAL to external storage, ~7d PITR, quarterly restore test; High-assurance (your profile) = RPO 15m/RTO 4h, <=5-min WAL off-cluster, 35d PITR, monthly + quarterly drills.

Amended brief pushed: briefs/DECISION-BRIEF-KANBAN-SOT-D3.md (new 'OWNER RATIFICATION + FLEXIBILITY AMENDMENT' section). You are GO to build schema/service/UI on Option A with the recovery posture as config. — homelab
