Recovery Procedures
Safe-mode, replay, backup restore, and tenant-restoration runbooks.
Recovery is a practised discipline, not an improvisation. Each procedure here is reversible; each preserves the audit chain.
Safe mode
Safe mode pauses all governed actions while preserving read access. Enter it when ledger replay fails or when an integrity check raises a blocking alarm. See Control Center.
Replay verification
The replay verifier recomputes the hash chain end-to-end and the replay outcome is itself audited. A failed replay is a P0 — see Audit Readiness.
Backup restore
Snapshots and DR drills live in Backup & Recovery. Restore is a gated operation; always restore into staging first, replay the chain, then promote.
Tenant restoration
A misconfigured tenant is restored by re-running Tenant Setup against the recovered snapshot, then replaying the missing actions from the audit log.
Start of Troubleshoot: Common Issues.
No direct successor — surfacing the section entry point.
What should I do next?
continues in "troubleshoot"
Ranked using IA v1 graph + intent map + glossary density (deterministic; no AI inference).