Agentic Restorations Matrix
How do I get back to a known-good state and not repeat this?
Filter
Layers, by what they can actually enforce
- In-agent (empty) — none
The agent is the patient, not the surgeon. Empty for recovery.
- Client-side rebuild — low-blast-radius
Operator-machine actions. Minutes. Reversible.
- Server-side restore — high-blast-radius
Target-system actions. Minutes to hours. The only way to recover from cluster-level compromise.
Showing 3 of 15.
Authorization at In-agent (empty)
(no enforcement)
Authorization at Client-side rebuild
Restore local hook config from VCS, verify file ownership and ACLs, reinstall pre-commit hooks, verify Claude Code is on the patched version.
Authorization at Server-side restore
Reapply RBAC, Kyverno, IAM from declarative source; audit for drift between cluster state and source.