{
  "schema": "guanghu.jd-recovery-policy/v1",
  "controller": "JD-FD-PRIMARY",
  "owner_namespace": "ICE-GL-ZY001",
  "recovery_nodes": [
    "BS-GZ-006",
    "BS-SG-001",
    "BS-SG-002",
    "BS-SG-003",
    "BS-SH-005",
    "ZY-SG-006"
  ],
  "allowed_actions": [
    "health-check",
    "restore-authz",
    "install-owner-access",
    "restore-navigation-map",
    "rollback-last-deploy"
  ],
  "forbidden": [
    "shared-recovery-private-key",
    "unrestricted-shell",
    "reverse-access-from-enterprise",
    "private-key-on-personal-computer",
    "unsigned-recovery-event"
  ],
  "total_outage": "rebuild from encrypted cross-provider control-plane backups"
}
