Automated DR restore-and-verify: prove ledger-db backups restore + GL stays balanced

Description and use

Automated DR restore and verification for OpenBank OSS, proving backup integrity and double‑entry balance.

Problem

Disaster recovery (DR) testing is limited to table‑top exercises; backups are never actually restored, so integrity cannot be verified.

Outcome

Provides automated, quarterly DR restore verification with double‑entry balance assertion, turning a hopeful backup into a proven control.

Workflow

• Trigger workflow via GitHub dispatch
• Restore ledger‑db from S3 to a temporary namespace
• Deploy ledger‑service without Kafka/OIDC
• Call GET /api/v1/ledger/close/trial-balance
• Verify response balanced:true
• Record RTO/RPO metrics
• Delete temporary namespace

Evidence

Almost no OSS banking reference impl actually proves its backups restore. Automated, quarterly, with a double-entry integrity assertion is a real differentiator.

Source