我们负责运营什么

整座根基，化作四项永不停歇的工作——而非一件需要您亲自操控的工具。

它如何受控

差别不在于一块炫目的仪表盘，而在于这份监管——没有任何动作 会擅自作用于您的系统。

可度量，而非空口

根基受护的真实方式——绝非杜撰的增长数字。

构建实况——谁在监测、谁在守护、谁在验证

代理并非主角；它们只是同一监管之下又一个受托管的层级。 这里是它真实的样貌。
代码保留英文——工程界通用的语言。

# one house under watch — what raises a hand, and what it does on its own (nothing)
POST https://api.matchtopalgorithm.ai/v1/operate/hosts
Authorization: MT-••••-••••-••••      — one key, one house
Content-Type: application/json

{
  "host":    "prod.yourcompany.com",
  "watch":   ["uptime", "certs", "backups", "intrusion"],
  "on_breach": { "alert": ["telegram", "email"], "act": "propose_only" },
  "window":  "24/5",
  "clock":   "Europe/Zurich"        — the sheet arrives in your hour
}

202 Accepted
{
  "host_id":   "h_5c2e80b1",
  "watch":     "live",
  "autopilot": "off — a human signs every action"
}

"""MatchTop · a system guard — on a breach it halts, it seals, it notifies.
Standard library only. It never acts further without a human signature."""

import json, time
from dataclasses import dataclass


@dataclass
class Breach:
    kind: str          # "cert_expiring" | "backup_failed" | "intrusion"
    host: str
    signed: bool = False   # stays False until a human says yes


def on_breach(b: Breach) -> dict:
    """Freeze the surface, seal the evidence, raise a hand. Nothing more."""
    seal = {"host": b.host, "kind": b.kind, "sealed_at": time.time()}
    notify(b)                                 # a human is told immediately
    return seal                               # halted and sealed, not yet acted on


def act(b: Breach):
    if not b.signed:
        raise PermissionError("no restart, scale-up or change ships without a signature")
    apply_fix(b)                               # only reachable after sign-off

"""MatchTop · the restore drill — proves a backup is really restorable.
It drills a shadow copy, never the live house, and writes down what it found."""

import csv, sys


def drill(backup, shadow_target) -> str:
    """Restore onto a shadow copy and verify it, on a schedule — not on faith."""
    restored = backup.restore_to(shadow_target)   # never touches the live host
    ok = restored.integrity_check()
    path = f"drill-{backup.id}.csv"
    with open(path, "w", newline="") as f:
        w = csv.writer(f)
        w.writerow(["backup_id", "taken_at", "restored_to", "verified"])
        w.writerow([backup.id, backup.taken_at, shadow_target, ok])
    return path                            # a record you can read, not a promise

无法复制之处

为何一座受托运营的根基，胜过一座须您亲自运营的根基。

一件托管工具无法运营您的系统——它把运营又甩回给您。一项 面目模糊的服务无法为您提供那位亲自监管的工程师。而一份无人恢复过的备份 无法在关键时刻托付。正因如此，此处没有价目表：我们审视 根基必须做到什么，加以度量，并按度量所得报价。

严守保密

在落下第一行代码之前，先明确您的系统及其数据如何受护。这一部分 没有商量余地。