[Recovery] Implement audited administration, backup, restore, and disaster-recovery exercises #64

Outcome

Recover state and manage stuck work without unaudited database edits.

Scope

• Add scoped dry-run inspect/retry/cancel/quarantine tools, encrypted backups, isolated restore, integrity validation, and scheduled recovery drills.

Acceptance criteria

• Administrative operations require reason, authorization, and complete audit.
• Restore preserves desired, observed, operation, plan, decision, and audit relationships.
• A scheduled drill meets F2 RTO/RPO with retained evidence.

Test and evidence

• Tool authorization tests and isolated restore/recovery report.

Dependencies

• Blocked by #30.
• Blocked by #34.
• Blocked by #36.
• Blocked by #37.
• Blocked by #11.
• Blocked by #27.
• Blocked by #88.

References

• Security model
• Delivery roadmap