Backup Security

A sovereign backup can contain enough material to recover authority, making backup custody as sensitive as live identity custody.

Protect

• Encrypt backups/exports containing private or recovery material.
• Separate encryption/recovery credentials from the backup itself.
• Hash/sign manifests so tampering is detectable.
• Use offline or independent copies to reduce provider capture/ransomware risk.
• Restrict access and maintain an audit trail.

Test

A backup is not qualified because a file exists. Perform destructive or isolated recovery, recompute roots, reverify passports/evidence and prove restored signing.

Retention

Retain enough historical releases/profiles to interpret signed state. Do not delete old interpretation material simply because a newer release is current.