Proof
Untested plan = hypothesis
15 / 22

Confidence comes from climbing the testing ladder.

Each level proves something different, from people knowing the plan to the platform surviving real controlled failover.

1
Tabletop

Validate roles, decision points, and missing knowledge.

2
Component restore

Restore one DB, PVC, or object set in isolation.

3
DR environment test

Build the recovery environment end to end.

4
Full failover drill

Move real service operation to the DR path.

What to measure every time: actual RTO, actual RPO, restore success rate, and operator friction.
What to fix after every test: stale commands, hidden dependencies, missing access, and unclear authority.