Appendix A
Templates
A.1 4-tier inventory
| Tier | Component | Recovered by (1) | Recovered by (2) | 2FA | Notes |
|---|---|---|---|---|---|
| ROOT | |||||
| CORE | |||||
| BRANCH | |||||
| LEAF |
A.2 Domain table
| Domain | Registrar | Registrant matches | Expires | Auto-renew | Transfer lock | NS | DNSSEC | Email (MX/SPF/DKIM/DMARC) |
|---|---|---|---|---|---|---|---|---|
| example.vn |
A.3 Key register
| Key | What it opens | Place 1 | Place 2 | Created | Last drill |
|---|---|---|---|---|---|
A.4 3-2-1-1-0 table
| Digit | Implementation | Status | Last checked |
|---|---|---|---|
| 3 copies | |||
| 2 media | |||
| 1 offsite | |||
| 1 immutable / air-gapped | |||
| 0 restore errors |
A.5 AI work contract (template)
- Assistant name: ***
- May: read mailbox ***; draft; read/write folder ***; prepare commands.
- Must not: send emails/messages; delete files; change configuration; receive passwords, OTPs, PINs, keys.
- Must ask first: any irreversible action.
- Reporting: only when something changes; with evidence (file paths, logs, hashes).