Scenario laboratory

The Recovery Window

A billing outage forces the team to balance return speed, data integrity, and governance under pressure.

There is no model answer

The billing system stopped after a failed overnight migration. A valid backup is 90 minutes old, but the latest financial transactions have not settled. Support asks for an immediate return; finance fears duplicate invoices or lost credit adjustments.

First decide what you will not sacrifice, then choose how to run the recovery. The outcome comes from the priority and execution model together, not from one isolated choice.

Choose a model to explore its consequences · 1/2

Declared priority

Which constraint will become the reference for the next hour?

Open every signal before choosing a path: Latest recovery test · Unsettled transaction ledger · Service commitments