{
  "schema_version": 1,
  "product": "AWatch-rus",
  "status": "registry-readiness infrastructure evidence manifest",
  "updated_at": "2026-06-22",
  "primary_source_repository": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus",
  "primary_git_clone_url_https": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus.git",
  "primary_git_platform": "self-hosted Gitea",
  "primary_git_provider": "REG.RU VPS / cloud server",
  "github_role": "public_mirror_only",
  "wiki_policy": {
    "github_wiki_detected": false,
    "gitea_builtin_wiki": "navigation_only",
    "authoritative_docs_path": "docs/registry"
  },
  "infrastructure": {
    "git_url": "https://git.iri1968.dpdns.org",
    "organization": "awatch-rus",
    "repository": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus",
    "https_enabled": true,
    "reverse_proxy": "Nginx",
    "gitea_local_http_endpoint": "127.0.0.1:3000",
    "external_3000_tcp_expected_exposed": false,
    "legal_sufficiency_confirmed": false
  },
  "backup": {
    "enabled": true,
    "tool": "gitea dump",
    "path": "/var/backups/gitea",
    "script": "/usr/local/sbin/awatch-gitea-backup.sh",
    "format": "zip",
    "checksum": "sha256",
    "retention_days": 14,
    "systemd_service": "awatch-gitea-backup.service",
    "systemd_timer": "awatch-gitea-backup.timer",
    "schedule_target": "daily 03:20 with RandomizedDelaySec=10m",
    "restore_runbook": "docs/registry/GITEA_BACKUP_AND_RESTORE_RUNBOOK_RU.md",
    "restore_tested": false,
    "production_ready": false
  },
  "build_runner": {
    "status": "planned",
    "target_hostname": "awatch-build-01",
    "target_provider": "REG.RU VPS / cloud server or another Russian-hosted server",
    "target_location": "Russian Federation",
    "separate_from_git_server": true,
    "recommended_specs": {
      "cpu": "4 vCPU",
      "ram": "8-16 GB",
      "disk": "120+ GB SSD/NVMe",
      "os": [
        "Debian 12",
        "Ubuntu 24.04 LTS"
      ]
    },
    "required_checks": [
      "cargo fmt --all --check",
      "cargo test --workspace",
      "cargo clippy --workspace --all-targets -- -D warnings",
      "cargo build --workspace --release",
      "registry_readiness_check",
      "release_evidence_check"
    ],
    "release_evidence": {
      "source_archive": true,
      "binary_archive": true,
      "sha256sums": true,
      "cargo_metadata": true,
      "cargo_tree": true,
      "sbom_cyclonedx": "if_tool_available",
      "sbom_spdx": "if_tool_available",
      "smoke_logs": true,
      "release_manifest": true
    }
  },
  "public_engineering_transparency": {
    "github_actions_ci": true,
    "github_actions_ci_status": "passed",
    "coverage_baseline": true,
    "coverage_workflow_status": "passed",
    "security_scanning": true,
    "security_workflow_status": "passed",
    "secret_scan_status": "passed",
    "issue_templates": true,
    "public_roadmap": true,
    "github_role": "public_mirror_validation_only",
    "registry_release_build": "requires_russian_build_runner"
  },
  "github_role_note": "GitHub is a public mirror only, not the target primary source/build/release contour for registry-readiness.",
  "remaining_gaps": [
    "legal rightsholder confirmation",
    "Russian build-runner",
    "release artifacts storage in RF",
    "tested restore procedure",
    "documented access control policy",
    "documented backup offsite copy",
    "final registry legal review"
  ],
  "forbidden_claims_not_made": [
    "not_claimed: FSTEC/FSB certification",
    "not_claimed: SIEM replacement",
    "not_claimed: DLP replacement",
    "not_claimed: ML/LLM-based detection",
    "not_claimed: cloud dependency",
    "not_claimed: automatic remediation"
  ]
}