Example: automated recovery
A restart policy can be configured correctly and trigger at the intended threshold, yet still interrupt in-flight work or extend recovery. A useful assurance scenario therefore observes both the control action and service outcomes during the intervention and recovery window.
Evidence to retain
Retain the failure condition, control configuration, demand level, action timeline, service metrics, state or transaction effects and recovery point. Those conditions define how far the result can support an operational claim.
