Deployment and backup

Publish pipeline

1. Validate — if there are errors, no revision is written
2. Publish — immutable revision + snapshot + audit (same transaction)
3. Activate — gRPC StageSnapshot then ActivateSnapshot
4. Dry-run — snapshot/hash + Health/GetStatus; no Activate

If no runtime is bound: 409 runtime.unbound.

Revisions

List, diff (deps=1 → Used by screens), rollback. Target + compiler version produce the same content hash.

Backup

Backup panel on the Deployment surface:

• Project export
• Preflight / restore API
• Scheduled backup: Installation → Upgrade

Secret key names do not enter the overlay.