Database Runbook

#Migration lifecycle

model/schema change
      │
      ▼
migration generation
      │
      ▼
migration review
      │
      ▼
test database
      │
      ▼
deployment

#Production rule

Never run destructive schema commands against production without a reviewed migration/backup strategy.

#Backups

Production backups should be:

• automated
• encrypted
• monitored
• periodically restore-tested

A backup that has never been restored is not a verified recovery mechanism.