Automated backup restore verification

[cwage]

Automated backup restore verification

Spun off from #113, which covered the bulk of backup strategy and tooling implementation. The core backup infrastructure is in place (unified backup.sh, local USB + B2 remote, OpenBao integration, ntfy notifications, daily cron). This issue tracks verifying the restore path works end-to-end.

Restore Verification

• Test restore of a sample file from B2 using break-glass credentials (no OpenBao dependency) — proves the full DR path works
• Test restore of a sample file from local USB backup
• Automate: script that pulls a random file back through b2crypt: and compares to source (run monthly via cron)
• Document restore procedure for both local and B2

Related

• Backup strategy and disaster recovery planning #113 — Backup strategy and disaster recovery planning (parent issue, closed)