Agentic Restorations Matrix
How do I get back to a known-good state and not repeat this?
Filter
Layers, by what they can actually enforce
- In-agent (empty) — none
The agent is the patient, not the surgeon. Empty for recovery.
- Client-side rebuild — low-blast-radius
Operator-machine actions. Minutes. Reversible.
- Server-side restore — high-blast-radius
Target-system actions. Minutes to hours. The only way to recover from cluster-level compromise.
Showing 3 of 15.
Blast radius at In-agent (empty)
(no enforcement)
Blast radius at Client-side rebuild
Rebuild operator host from known-good image if untrusted, reinstall agent runtime with signature verification, re-derive sandbox profiles.
Blast radius at Server-side restore
Restore data from immutable backups verified pre-incident, redeploy IaC, reapply NetworkPolicy and ResourceQuota.