# Restore-proof worksheet

Blank planning record. It is not evidence that a backup, integrity check, key recovery, extraction, comparison, or application validation ran. Never place secrets, passphrases, exported keys, private hostnames, usernames, or private filesystem paths here.

## Scope and identity

- Review ID:
- Tool and pinned version:
- Documentation/release reference:
- Repository identifier (synthetic or redacted public-safe label only):
- Archive name or immutable archive identifier:
- Source fixture label:
- Source path shape supplied to archive creation:
- Source working-directory shape:
- Source manifest reference:
- Source manifest SHA-256:

## Archive creation evidence

- Creation status: Not run
- Exit status:
- Bounded log/evidence reference:
- Declared include rules:
- Declared exclude rules:
- Exceptions:

## Integrity evidence

- Check status: Not run
- Check scope/mode:
- File-data cryptographic verification used: Not evaluated
- Exit status:
- Bounded log/evidence reference:
- Exceptions:

## Recovery-material custody

- Required key mode/material class:
- Key export independently available: Not evaluated
- Key-custody role (never the key or location):
- Passphrase-custody role (never the passphrase or location):
- Recovery-material test status: Not run
- Exceptions:

## Isolated extraction boundary

- Dry-run status: Not run
- Dry-run exit status:
- Restore-root label (public-safe only):
- Separate from source: Not evaluated
- Empty before extraction: Not evaluated
- Boundary evidence reference:
- Actual extraction status: Not run
- Actual extraction exit status:
- Bounded log/evidence reference:

## Comparison

- Restored manifest reference:
- Restored manifest SHA-256:
- Path inventory comparison: Not evaluated
- Content-hash comparison: Not evaluated
- Ownership/group comparison: Not evaluated
- Permission/mode comparison: Not evaluated
- Timestamp comparison: Not evaluated
- Symlink/special-file comparison: Not evaluated
- Declared metadata limitations:
- Unresolved differences:

## Application-level review

- Application validation status: Not evaluated
- Validation owner:
- Acceptance condition:
- Bounded evidence reference:
- Exceptions:

## Review and verdict

- Reviewer:
- Review time:
- Verdict: Unresolved
- Supported claim, stated narrowly:
- Claim limitations:
- Follow-up owner/action:
- Cleanup status: Not evaluated

Allowed verdicts: `Supported`, `Supported with exceptions`, `Unresolved`, or `Failed`. Blank evidence and `Not run` / `Not evaluated` fields never mean success.