Backup procedure: snapshots run each night after ingestion completes. Operators verify the backup manifest, compare the corpus fingerprint, and restore a sample document before approving the recovery report.
