brushing up backups

ansible/roles/backup_store/tasks/main.yml

@@ -33,6 +33,19 @@
     validate: "bash -n %s"
   become: yes
 
+# A human-run assertion that last night actually worked. Generated from the same
+# source list as the puller, so it can never drift out of sync with what is
+# supposed to be arriving.
+- name: Install the backup check script
+  ansible.builtin.template:
+    src: check-backups.sh.j2
+    dest: /usr/local/bin/check-backups.sh
+    owner: root
+    group: root
+    mode: '0755'
+    validate: "bash -n %s"
+  become: yes
+
 - name: Install the pull-backups systemd units
   ansible.builtin.template:
     src: "pull-backups.{{ item }}.j2"