POSTGRES BACKUP INDEPENDENCE

Postgres backups your coding agent can run — and prove.

Scheduled logical backups for Supabase and Neon to your own AWS S3 — with Ed25519-signed manifests, operator-run restore drills, and an audit chain your compliance reviewer can verify offline.

Read the quickstart See a real evidence bundle →Docs

Supabase · Neon — RDS on the roadmap

Watch it work

The command, and its signed proof.

Your agent triggers a backup; the same run hands back a signed manifest your auditor can verify offline. Same job, two views.

Run it from your agent

$ walwarden backup trigger --database prod_db --wait --json
{ "backup_job_id": "bkp_8f21", "status": "completed",
  "size_bytes": 1288490188, "manifest_sha256": "9c2f…b3a1",
  "signature": "ed25519:abc123…", "finished_at": "2026-06-13T02:34:07Z" }

Signed manifest

{
  "backup_job_id": "bkp_8f21",
  "database": "prod_db",
  "provider": "supabase",
  "destination": "s3://acme-walwarden-backups/…",
  "size_bytes": 1288490188,
  "sha256": "9c2f…b3a1",
  "signature": "ed25519:abc123…",
  "verified_at": "2026-06-13T02:34:09Z"
}

Same run, two views: the command your agent runs, and the signed manifest your auditor verifies.

The peacetime anchor

Every number carries a timestamp.

Trust comes from watching the system work, not from being told it does. Each surface names the verification, the time, and the hash.

Verifications passed · 24h12 of 12last check 7m ago

Audit chainIntactsince 2026-01-15

Last manifest02:34ed25519 · 1.2 GB

Audit evidence stream

Observable agent tool-call history.

Every agent action signs a manifest and advances the audit chain — the same record your reviewer reads.

Time	Tool call	Database	Result	Manifest hash
02:34:07	backup.trigger	prod_db	completed	9c2f…b3a1
02:34:09	evidence.get	prod_db	verified	9c2f…b3a1
01:10:52	backup.trigger	analytics_db	completed	a71d…40ce
00:58:31	restore.status	analytics_db	completed	a71d…40ce
00:12:04	backup.trigger	prod_db	completed	5e88…12af

Honest roadmap

Shipping today: scheduled logical backups, Ed25519-signed manifests, operator-run restore drills, evidence bundles, and offline verification. On the roadmap [coming]: WAL streaming and point-in-time recovery, RDS/Aurora as a provider, and automated restore drills.

Verifiable backup independence.

Closed alpha · Postgres → your own AWS S3 · scheduled logical backups with operator-run restore drills.

Read the quickstart