03f6c16eab
First pass had a partial view. Backups are 3 layers (Swift dumps + encrypted off-cluster borg to DLX + Cinder snapshots), not just pg_dumpall — #15 (DR) resolved, #13/#14 re-scoped. Security has iptables auto-block (security-monitor) + AIDE FIM — #17 re-scoped; ClamAV (#16) remains the one real gap. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>