---
since: 0.6.0
---

# Database Runbook

## Migration lifecycle

Schema changes should follow:

```text
model/schema change
      │
      ▼
migration generation
      │
      ▼
migration review
      │
      ▼
test database
      │
      ▼
deployment
```

## Production rule

Never run destructive schema commands against production without a reviewed
migration/backup strategy.

## Backups

Production backups should be:

- automated
- encrypted
- monitored
- periodically restore-tested

A backup that has never been restored is not a verified recovery mechanism.