# Recovery Playbook (Staged)

## Purpose
Turn restoration into a repeatable operational habit.

## Staged Restore Policy
- Never restore into system directories during drills.
- Always restore into a timestamped target under DR_TARGET_BASE.

## Minimum Drill
1. Validate backup artifacts (exist + ROOT recomputation)
2. Decrypt archive
3. Extract archive
4. Verify file count > 0
5. Spot-check content

## Service-Specific Production Restore
Create a dedicated procedure per service:
- VaultMesh Portal (Axum)
- Node gateway
- Reverse proxy (nginx)
- Monitoring (Prometheus/Grafana)