Backups that survive operator error

A backup that hasn’t been restored is a hope, not a backup.

Minimum bar:

1. Automated backups
2. Off-host copy
3. Regular restore test (documented)
4. Clear RPO/RTO expectations