Wayfinder ticket #155, map #151 (alpha → beta).
Question: disaster-recovery story for outlines living in per-user DO SQLite, and the smallest thing worth building for beta.
- The durability floor is already excellent and free. Every SQLite-backed DO has automatic 30-day Point-in-Time Recovery — on by default, covers all SQL rows + KV, whole-DB rollback per object. Since DO = user, per-DO recovery is per-user recovery. No infrastructure to build to have it.
- The only gap for beta is usability: there's no button to invoke a restore. The smallest worthwhile build is an admin-gated "restore one user" tool that drives PITR for a single DO. ~a day of work; turns "theoretically recoverable" into "the operator can actually recover a user."
