Drill a restore
Drill a restore restores each Capability’s records in isolation on its cadence, checks both recovery objectives, and opens an Issue on a miss.
Trigger
Runs every quarter. Part of Continuity, run by the Engineering Team.
Steps
- List each Capability whose restore drill is due.
- Restore each Capability’s records into an isolated namespace and time it.
- Fail over to each fallback upstream in test, then back.
- Confirm the successor signer is named and reachable.
- Open an Issue for every objective the drill missed.
Outputs
Example
The quarterly drill restores the payments records into an isolated namespace in 38 minutes, against a one-hour objective. Email fails over to the fallback provider and back. No Issue opens.