Recovery Engineering

Backups, replicas, and runbooks matter only when they help restore the first useful service under the failures you actually expect.