Complete procedures with a way back.

Make local journals persistent and bounded, receive per-host journal files on a dedicated collector, and upload structured events over mutually authenticated TLS while preserving a local buffer and auditable failure behavior.

Deploy Loki 3.7 with Alloy 1.18, authenticated tenant isolation, bounded labels, pre-export redaction, object-store durability, compactor retention and an isolated recovery drill.

Log request timing and upstream timing per site, protect log paths, validate rotation, and prepare bounded incident queries for 4xx, 5xx, and slow requests.