# HUMAN-ONLY RECOVERY RECORD. Keep outside the agent-readable repository.
# Never place password hashes, passdb contents, or secret values in this file;
# record protected backup references. Exact SIDs are recovery-sensitive identity
# material and remain human-held unless provider disclosure is explicitly approved.

schema_version: 1
classification: human-admin-only
owner:
observed_at:
samba_version:
netbios_name:
workgroup:
local_machine_sid:
passdb_backend:

discovered_paths:
  private_directory:
  state_directory:
  lock_directory:
  config_file:

protected_backup:
  method:
  quiesce_or_supported_consistency_step:
  passdb_reference:
  local_sid_and_secrets_state_reference:
  group_mapping_reference:
  module_state_references: []
  encryption_key_recovery_reference:
  destination:
  retention_authority:
  last_verified_at:

principal_sid_mappings:
  - principal_opaque_id:
    sid:
    unix_uid_or_gid:
    mapping_source: null # allowed: passdb, net-groupmap, directory, other

rebuild_order:
  - install the recorded Samba version or a tested compatible release
  - restore or deliberately set the original local machine SID
  - restore passdb and group mappings through supported tooling
  - restore module state required for SID-bearing ACLs
  - restore data and extended attributes into an isolated test share
  - compare Windows ACL POSIX ACL and effective access

acl_recovery_test:
  fixture_reference:
  allowed_principal:
  denied_principal:
  windows_acl_before_reference:
  windows_acl_after_reference:
  posix_acl_before_reference:
  posix_acl_after_reference:
  allowed_client_result:
  denied_client_result:
  evidence_reference:
  result: unverified
