POSTGRES BACKUP INDEPENDENCE
Postgres backups your coding agent can run — and prove.
Scheduled logical backups for Supabase and Neon to your own AWS S3 — with Ed25519-signed manifests, operator-run restore drills, and an audit chain your compliance reviewer can verify offline.
Supabase · Neon — RDS on the roadmap
Watch it work
The command, and its signed proof.
Your agent triggers a backup; the same run hands back a signed manifest your auditor can verify offline. Same job, two views.
Run it from your agent
$ walwarden backup trigger --database prod_db --wait --json
{ "backup_job_id": "bkp_8f21", "status": "completed",
"size_bytes": 1288490188, "manifest_sha256": "9c2f…b3a1",
"signature": "ed25519:abc123…", "finished_at": "2026-06-13T02:34:07Z" }Signed manifest
- backup_job_id
- bkp_8f21
- database
- prod_db
- provider
- supabase
- destination
- s3://acme-walwarden-backups/…
- size_bytes
- 1288490188
- sha256
- 9c2f…b3a1
- signature
- ed25519:abc123…
- verified_at
- 2026-06-13T02:34:09Z
Same run, two views: the command your agent runs, and the signed manifest your auditor verifies.
The peacetime anchor
Every number carries a timestamp.
Trust comes from watching the system work, not from being told it does. Each surface names the verification, the time, and the hash.
Audit evidence stream
Observable agent tool-call history.
Every agent action signs a manifest and advances the audit chain — the same record your reviewer reads.
| Time | Tool call | Database | Result | Manifest hash |
|---|---|---|---|---|
| 02:34:07 | backup.trigger | prod_db | completed | 9c2f…b3a1 |
| 02:34:09 | evidence.get | prod_db | verified | 9c2f…b3a1 |
| 01:10:52 | backup.trigger | analytics_db | completed | a71d…40ce |
| 00:58:31 | restore.status | analytics_db | completed | a71d…40ce |
| 00:12:04 | backup.trigger | prod_db | completed | 5e88…12af |
Honest roadmap
Shipping today: scheduled logical backups, Ed25519-signed manifests, operator-run restore drills, evidence bundles, and offline verification. On the roadmap [coming]: proof-gated logical recovery windows, RDS/Aurora as a provider, and automated restore drills. We do not claim managed-provider true PITR.
Verifiable backup independence.
Closed alpha · Postgres → your own AWS S3 · scheduled logical backups with operator-run restore drills.
Read the quickstart