Checkpoints and rollback preview
The checkpoint service defines records, retention behavior, REST/MCP operations, and a rollback state machine for apps.
No real recovery yet: the active snapshot adapter fabricates VM and database snapshot identifiers. Stop/start/health stages are simulated, and no disk or database state is captured or restored. A checkpoint created today is not a backup and must not be used as a recovery control.
What can be tested
The preview surface lets integration developers exercise:
- manual checkpoint creation and listing;
- pin, unpin, delete, and retention metadata;
- ownership checks;
- rollback state transitions; and
- creation of a pre-rollback safety record.
The following MCP tools expose that control plane:
| Tool | Preview behavior |
|---|---|
create_checkpoint | Creates a record with stub snapshot identifiers |
list_checkpoints | Lists owned records and reported usage |
pin_checkpoint | Exempts a record from retention pruning |
delete_checkpoint | Deletes an unpinned record |
rollback_app | Exercises the simulated rollback sequence |
Do not describe a successful response from these tools as a recovered app.
Production recovery today
For an immutable app deployment, recover from source and separately managed data:
- identify a known-good Git revision;
- confirm the database or object-store backup exists and can be restored;
- queue a new immutable deployment for that revision;
- restore data through the service’s documented recovery procedure; and
- verify application health and user-visible behavior before switching traffic.
Keep backup retention, restore testing, and recovery objectives outside the checkpoint preview until real adapters have shipped and passed a restore drill.
What remains
- real VM and database snapshot primitives;
- rollback integration with the immutable variant deployment pipeline;
- failure-atomic restore behavior;
- deploy hooks that create verified checkpoints;
- capacity and retention enforcement against real storage; and
- backup/restore drills with captured evidence.