◆ DESIGN MOCKUP · sample data, not a live system · the real console ships in Phase 3 ◆

🛡 backup.arnao.ai

🔒 TAILSCALE-ONLY · read-only
Fleet disaster-recovery status for Mia (Mac Mini) · reports, cannot act
🛡️
Fleet is PROTECTED
3 copies · 2 media · offsite immutable · verified off-machine · last backup 42 min ago
0 ERRORSindependent verify · 2h ago
Latest backup ✓ SUCCESS
When42 min ago · 14:18Z
Tier-1 (crown jewels)1.61 GB
Increment (dedup)184 MB
Duration3m 41s
Next scheduledin 18 min
Copies · 3-2-1-1-0 4 / 4 healthy
💽
Mia local — fast tier
restic · quick restore
42m
🗄️
NAS — append-only
rest-server · Btrfs locked snaps
42m
☁️
Cloud — Object Lock
B2 compliance · offsite
1h
🔌
Air-gap USB (drive B)
offline · rotate monthly
9d
Retention ladder on policy
hourly
24/24
daily
14/14
weekly
8/8
monthly
11/12
Prune runs onNAS (off-Mia)
Immutable window45 days
Integrity — verified off-machine clean
restic check✓ pass · 2h ago
deep read (10%/wk)✓ no errors
scratch-Postgres restore✓ query OK
SQLite integrity_check✓ ok
secrets.enc decrypt-test✓ ok
Ransomware canary
🟢
UNTOUCHED
18 decoy files · checksums verified 6 min ago
Watchtower armed
Dead-man's switch♥ heartbeat 41m
Alert channelhealthchecks → Telegram
RPO (normal)≤ 1 hour
RPO (post-compromise)≤ 45 days
RTO (rehearsed)~3 h
📖 Open restore runbook →
🔒 Tailnet-only — never exposed publicly; posture details (air-gap timing, retention depth) are not a public targeting surface.
This console reports and cannot back up, restore, prune, or delete — no mutating endpoints, no secrets rendered. Status is published by the independent verifier, not by Mia. If Mia goes silent, the dead-man's switch alarms.