A Database Endpoint Switch Is Not the First Correct Operation
A controlled two-instance cutover distinguishes endpoint selection from a verified new operation, including a committed write whose acknowledgement timed out.
THE READING ROOM
Data and production
THE READING ROOM
Writing & investigations.
A Verified Backup Is Not Yet a Recovered Application
A real checksummed backup is verified, restored and checked against exact transactions, then the application refuses readiness until its external dependency agrees.
A Recovery Runbook Should Refuse the Wrong Next Step
An executable recovery runbook rejects missing artifacts, wrong identities, stale history and conflicting replay before allowing the next step.