{"id":"disaster-recovery-shares-immutability-constraint","text":"Disaster recovery and normal operations share the same immutability enforcement: etcd backup/restore operates under version governance (no rollback, forward-only) while node configuration flows exclusively through the MCO pipeline — both prohibit direct manipulation, making the immutable delivery model the universal access pattern.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["disaster-recovery-within-version-governance","node-config-immutable-delivery-pipeline"],"outlist":[],"label":"DR and normal ops are governed by the same immutability principle — direct access to etcd or nodes is prohibited in both cases, revealing a universal platform constraint."}],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"disaster-recovery-shares-immutability-constraint","truth_value":"IN","reason":"SL justification valid","antecedents":["disaster-recovery-within-version-governance","node-config-immutable-delivery-pipeline"],"label":"DR and normal ops are governed by the same immutability principle — direct access to etcd or nodes is prohibited in both cases, revealing a universal platform constraint."},{"node":"disaster-recovery-within-version-governance","truth_value":"IN","reason":"SL justification valid","antecedents":["etcd-disaster-recovery-constraints","version-coupling-and-update-governance"],"label":"depth-1 etcd DR constraints + depth-1 version governance combine to reveal DR is bounded by the same forward-only model"},{"node":"etcd-disaster-recovery-constraints","truth_value":"IN","reason":"SL justification valid","antecedents":["etcd-backup-not-rollback-mechanism","etcd-backup-requires-oc-debug-chroot","no-direct-etcd-access"],"label":"Three independent constraints that together define the narrow operational envelope for etcd recovery"},{"node":"etcd-backup-not-rollback-mechanism","truth_value":"IN","reason":"premise"},{"node":"etcd-backup-requires-oc-debug-chroot","truth_value":"IN","reason":"premise"},{"node":"no-direct-etcd-access","truth_value":"IN","reason":"premise"},{"node":"version-coupling-and-update-governance","truth_value":"IN","reason":"SL justification valid","antecedents":["cnv-version-must-match-ocp-version","cnv-update-ocp-first-then-cnv","hcp-update-order-management-mce-hosted","ocp-rollback-not-supported"],"label":"Version coupling rules and forward-only updates form a strict upgrade governance model"},{"node":"cnv-version-must-match-ocp-version","truth_value":"IN","reason":"premise"},{"node":"cnv-update-ocp-first-then-cnv","truth_value":"IN","reason":"premise"},{"node":"hcp-update-order-management-mce-hosted","truth_value":"IN","reason":"premise"},{"node":"ocp-rollback-not-supported","truth_value":"IN","reason":"premise"},{"node":"node-config-immutable-delivery-pipeline","truth_value":"IN","reason":"SL justification valid","antecedents":["rhcos-immutable-update-model","image-mirror-configuration-pipeline"],"label":"Both OS updates and registry configuration use the same MCO-mediated immutable delivery pattern"},{"node":"rhcos-immutable-update-model","truth_value":"IN","reason":"SL justification valid","antecedents":["rhcos-nodes-immutable","rhcos-rpm-ostree-updates","image-layering-verify-rpm-ostree-status"],"label":"Three facets of the same immutable-OS operational model"},{"node":"rhcos-nodes-immutable","truth_value":"IN","reason":"premise"},{"node":"rhcos-rpm-ostree-updates","truth_value":"IN","reason":"premise"},{"node":"image-layering-verify-rpm-ostree-status","truth_value":"IN","reason":"premise"},{"node":"image-mirror-configuration-pipeline","truth_value":"IN","reason":"SL justification valid","antecedents":["oc-mirror-generates-idms","mirror-config-applied-via-mco-registries-conf","icsp-deprecated-in-favor-of-idms"],"label":"End-to-end mirror configuration from generation to node application"},{"node":"oc-mirror-generates-idms","truth_value":"IN","reason":"premise"},{"node":"mirror-config-applied-via-mco-registries-conf","truth_value":"IN","reason":"premise"},{"node":"icsp-deprecated-in-favor-of-idms","truth_value":"IN","reason":"premise"}]}}