Restore Points

Honest by Construction

Expected facts are assertions only; compiler output is the source of truth.

highlighted = computed this step

Honest by construction

Each lesson compiles raw backup inputs, turns recomputed restore facts into expected assertions, then compiles again.

expected is assertion only\text{expected is assertion only}

Show the guarded restore

The guarded restore applies 2 records and skips 1 record.

applied=2\text{applied}=2

Backup and restore-point examples are tiny finite replay models; cloud products, backup strategy, RPO/RTO, encryption, compliance, performance, and runbooks are out of scope.

Guarded restore facts: backup snapshotitemvalueA10B20 log after backuppositemvalue1A112B253A13 restore point factsfactvaluetarget2appliedCount2skippedCount1changedCount2targetIsBackupnotargetInLogyes applied log recordspositemvalue1A112B25 skipped log recordspositemvalue3A13 restored stateitemvalueA11B25 changed itemsitembeforeafterA1011B2025

Try to tamper

Wrong expected facts, derived sidecars, duplicate log positions, and out-of-range targets fail closed.

fail closed before render\text{fail closed before render}

Summary

Book seventeen stays inside tiny backup-copy and log-replay facts. It makes no product or operations claim.

recomputed restore facts\text{recomputed restore facts}