FAILOVER.

12 disaster-recovery drills run across regions and services. 4 missed their declared RTO by more than 50%. 2 surfaced an undocumented dependency on a single AZ.

An untested DR plan is a fiction document.

DR-007 · us-east-1 region failover MISSED RTO

Target RTO 30min. Actual: 1h47m. Bottleneck: stateful cache.

Pre-warm replica cache, retest in 30d, document new RTO.