Skip to content

Drill a restore

Drill a restore restores each Capability’s records in isolation on its cadence, checks both recovery objectives, and opens an Issue on a miss.

Trigger

Runs every quarter. Part of Continuity, run by the Engineering Team.

Steps

  1. List each Capability whose restore drill is due.
  2. Restore each Capability’s records into an isolated namespace and time it.
  3. Fail over to each fallback upstream in test, then back.
  4. Confirm the successor signer is named and reachable.
  5. Open an Issue for every objective the drill missed.

Outputs

Example

The quarterly drill restores the payments records into an isolated namespace in 38 minutes, against a one-hour objective. Email fails over to the fallback provider and back. No Issue opens.