加固部署隔离与备份来源契约（07-26-internal-ops-recovery-baseline）

scripts/backup-storage.sh

@@ -16,14 +16,8 @@ fi
 
 STORAGE_DIR_HOST="${STORAGE_DIR_HOST:-}"
 if [[ -z "$STORAGE_DIR_HOST" ]]; then
-  if [[ -n "${STORAGE_DIR:-}" && -d "${STORAGE_DIR:-}" ]]; then
-    STORAGE_DIR_HOST="$STORAGE_DIR"
-  elif [[ -d "$ROOT_DIR/deploy/trialrun/data/storage" ]]; then
-    STORAGE_DIR_HOST="$ROOT_DIR/deploy/trialrun/data/storage"
-  else
-    echo "[ERR] storage dir not found; set STORAGE_DIR_HOST" >&2
-    exit 1
-  fi
+  echo "[ERR] STORAGE_DIR_HOST is required; implicit storage paths are forbidden" >&2
+  exit 1
 fi
 
 if [[ ! -d "$STORAGE_DIR_HOST" ]]; then