feat(platform): verify local cross-cluster metadata recovery

.github/workflows/ci.yml

@@ -5,7 +5,10 @@ on:
     branches: [main, develop]
   pull_request:
     # Keep the active lineage reviewable until ADR-035 promotes it to main.
-    branches: [main, feat/v12-extensible-platform]
+    branches:
+      - main
+      - feat/v12-extensible-platform
+      - feat/ar1-metadata-fabric-durable-backup-contract
 
 env:
   PYTHON_VERSION: "3.13"
@@ -82,6 +85,9 @@ jobs:
       - name: Validate metadata fabric backup repository
         run: python -m data_agent.metadata_fabric_backup_repository validate
 
+      - name: Validate metadata fabric cross-cluster recovery
+        run: python -m data_agent.metadata_fabric_cross_cluster_recovery validate
+
       - name: Validate DolphinScheduler adapter boundary
         run: python -m data_agent.dolphinscheduler_adapter validate
 
@@ -119,6 +125,7 @@ jobs:
             data_agent/test_metadata_fabric_bridge.py \
             data_agent/test_metadata_fabric_live_evidence.py \
             data_agent/test_metadata_fabric_backup_repository.py \
+            data_agent/test_metadata_fabric_cross_cluster_recovery.py \
             data_agent/test_metadata_fabric_recovery_rehearsal.py \
             data_agent/test_metadata_fabric_sandbox.py \
             data_agent/test_platform_authorization.py \

config/metadata-fabric-cross-cluster-recovery.local.yaml

@@ -0,0 +1,35 @@
+schema: gda.metadata_fabric_cross_cluster_recovery_profile.v1
+environment: local_docker_desktop
+source_cluster:
+  context: docker-desktop
+recovery_cluster:
+  context: kind-gda-metadata-recovery
+  node_image: kindest/node:v1.35.5
+repository:
+  runtime: docker_host_container
+  failure_domain: outside_source_and_recovery_kubernetes_clusters
+  minio_image: minio/minio:RELEASE.2025-04-22T22-12-26Z
+  mc_image: minio/mc:RELEASE.2025-04-16T18-13-26Z
+  bucket: gda-metadata-fabric-cross-cluster-backups
+  versioning: Enabled
+  object_lock:
+    enabled: true
+    mode: COMPLIANCE
+    retention_days: 1
+  identities:
+    writer_delete_denied: true
+    reader_write_denied: true
+claims:
+  local_cross_cluster_recovery_verified: false
+  production_backup_target_verified: false
+  production_retention_verified: false
+  production_kms_verified: false
+  production_tls_verified: false
+  production_cross_cluster_recovery_verified: false
+  source_cluster_loss_verified: false
+  rpo_slo_verified: false
+  rto_slo_verified: false
+  oidc_verified: false
+  network_policy_enforcement_verified: false
+  writes_to_gda_enabled: false
+  production_ready: false