pg_dumpall → local + (offsite pending R2). Passphrases in Doppler — each box has its OWN, in a DIFFERENT workspace:
paul-chatdb = infra/prd/PAUL_SUPABASE_BACKUP_GPG_PASS (consultancy workspace);
emily-prod = ritual-training/prd/EMILY_SUPABASE_BACKUP_GPG_PASS in EMILY's workspace, read via ritual-doppler.
Monitored daily from Paul's Mac; alerts email resurgentvoyage@gmail.com on any failure. Retention: 7 daily / 4 weekly / 6 monthly.