TRUST · RELIABILITY
Reliability & Recovery
The durability model is designed around persistent state, observable worker health and fail-closed recovery. Current proof state is shown separately from architecture.
RECOVERY DESIGN
Durable work
Jobs are persisted with leases, heartbeat renewal, cancellation boundaries and terminal-state reconciliation.
Retry containment
Expired leases and retry-scheduled work are reconciled from canonical state instead of relying on in-memory success.
Authenticated backups
Backup creation writes a SHA-256 verified archive plus authenticated manifest before a restore can begin.
Isolated recovery
Restore tooling refuses source-equals-target and non-empty targets and verifies structural counts after restore.