Reliability center
Alert policies, incidents, and continuous proof that backups can actually be restored.
Primary health, WAL archiving, streaming replicas, and lag.
Restic repository evidence from DigitalOcean Spaces.
Monthly full restore, PITR boundary, inventory, and replica verification.
Quorum, fencing evidence, replay lag, and promotion authorization.
Every control must pass before unattended promotion can be enabled.
Fresh backup → isolated restore → validation evidence → cleanup.
Production traffic and credentials remain unchanged.
Creates a dump, restores it in isolation, validates it, then cleans up.
Continuously verify a fresh backup on an isolated database.
No automated drills
Schedule validation for production databases.
No alert policies
No incidents
Everything is within policy.
No recovery drills yet
No full DR exercises yet
Run one to capture RPO, RTO, restoration, and cleanup evidence.
No promotion events
The event ledger will record preflight, fencing, authorization, promotion, rejoin, and abort evidence.