<a id="ch-19"></a>

## Chapter 19 — A backup contact is not a digest

<!-- open-cyber-academy:lesson-figures:start ch-19 -->
### Lesson map

Lesson 19. Map, example, EX065.

```mermaid
flowchart TD
  I["Image cells 0, 0, 1"] --> H["June miss: developer away"]
  B["Unnamed backup contact"] --> P["Prose, not a cell"]
  H --> Q{"Does July's 1 store a digest?"}
  P --> Q
  Q -->|No| K["The confirmation stays a one-line message"]
```

The contact explains a gap. The July tick does not identify an image.

### Logical drawing

```text
image index: 3
May 0, June 0, July 1
June cause in prose: developer on holiday
later prose: a backup contact
not stored: digest, tag, pod profile, network policy
```
<!-- open-cyber-academy:lesson-figures:end ch-19 -->

### Learning outcomes

After this chapter, you should be able to:

1. Read the image column as two zeros and one one.
2. Keep the backup contact unnamed and outside the vector.
3. Refuse a Kubernetes profile and a network-policy result.

### 19.1 July's tick is not an image identity.

Index 3 is the image task. May and June are `0`. July is `1`. The June miss is explained in prose: the developer was on holiday. A backup contact was agreed so the rebuild would not depend on one person. The contact is unnamed. July's `1` does not store that person's name, and it does not store a digest, a tag, or the text of the confirmation email. The email remains the one-line message from the agreement. It is filed in the decision log when it arrives. A missing month, such as June, is visible because the message was absent, which matches the zero already in the vector.

Pod Security Standards name Privileged, Baseline, and Restricted profiles. No profile was selected here, and no pod, host path, or capability list is recorded. A network policy is likewise unrecorded. `price-list.pdf` is public as a storage token. That token is not a packet rule, and the lack of a policy object is not evidence about which connections the booking app accepts. The platform is still the simpler host, not a cluster on which those objects would even be written.

The image column's two zeros remain after the contact is agreed. Agreement is not a retroactive `1`.

### 19.2 Worked example

| Claim | Record | Decision |
|---|---|---|
| Image was missed in May and June | Index 3 | Keep |
| A backup contact was agreed | Prose, unnamed | Keep |
| "July's 1 is the image digest." | No digest field | Reject |
| "A Restricted pod profile passed." | No profile was recorded | Reject |

> **Synthetic case.** The developer and the backup contact stay unnamed.

### Errors and limits

Do not apply a cluster control to a platform that has no cluster record.

### Apply

- **EX065 — Contact versus image.** A note fills July's image bit with a digest, names the backup contact, marks June as passed because the contact now exists, and reports a Restricted pod profile. What do you reject? *Rubric:* 3 = reject the digest, the name, the rewritten June zero, and the profile; May and June stay 0 and July stays 1 at index 3; the contact stays unnamed prose;; 2 = the column stays and the digest is refused;; 1 = one cell;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-19 -->
### Continue studying — lesson 19 (chapter 19 of 20)

[← Chapter 18](#ch-18) · [Course chapter index](../SUBJECTS.md) · [Chapter 20 →](#ch-20)

Continue to the next authored lesson.
<!-- open-cyber-academy:chapter-navigation:end -->

## Worked answers

<a id="answer-ex065"></a>
**EX065.** Reject the digest, the contact's name, a rewritten June zero, and a Restricted pod profile. The image cells stay 0, 0, and 1. The backup contact stays unnamed prose.
