{
  "id": "I002",
  "title": "Backup Pressure Continues on Hermes",
  "affected_vm": "web_server",
  "description": "The /var/backups directory keeps filling because the partial fix (either cron corrected but disk not cleared, or disk cleared but cron still runs as root) leaves the underlying problem unresolved. The backup pressure will return.",
  "trigger_flags": ["hermes_backup_partial"],
  "blast_radius_quests": ["Q005"],
  "blast_radius_incidents": ["I001"],
  "notification": "Backup pressure is building again on hermes. /var/backups is filling up.",
  "notification_severity": "warning",
  "escalation_steps": [
    {
      "trigger_after_seconds": 1200,
      "notification": "hermes: /var/backups is at 85%. Backup jobs are still accumulating owned-by-root files.",
      "notification_severity": "warning",
      "world_flags": []
    },
    {
      "trigger_after_seconds": 2400,
      "notification": "hermes: /var/backups is critically full. Backup jobs are failing. Dave has noticed.",
      "notification_severity": "critical",
      "world_flags": [],
      "escalates_tickets": [
        { "ticket_id": "T005", "new_priority": "high" }
      ]
    },
    {
      "trigger_after_seconds": 3600,
      "notification": "hermes: Backup agent is now crashing. Sarah is asking questions in the channel.",
      "notification_severity": "critical",
      "world_flags": ["hermes_backup_root_running"]
    }
  ],
  "world_flags": ["hermes_backup_partial"],
  "resolution_requirements": {
    "clear_flag": "hermes_backup_partial",
    "set_flag": "hermes_backup_healthy",
    "validation": {
      "type": "and",
      "rules": [
        { "type": "file_contains", "vm": "web_server", "path": "/etc/cron.d/db-backup", "contains": "backup-agent" },
        { "type": "file_owner", "vm": "web_server", "path": "/var/backups/db", "user": "backup-agent", "group": "backup-agent" },
        { "type": "disk_usage_below", "vm": "web_server", "path": "/var/backups", "threshold_percent": 70 }
      ]
    }
  },
  "trust_effects": {
    "ignored": -3,
    "resolved_partially": -1,
    "resolved_cleanly": 0,
    "_note": "No trust bonus for resolving a problem you created by doing Q005 partially. Zero is the floor."
  }
}