| Failure | Expected behavior | Recovery |
|---|---|---|
| Database commit failure | Do not acknowledge a saved teaching | Roll back and surface failure |
| Worker/job failure | Durable failed/pending state, bounded retry | Inspect job and retry/recover deliberately |
| Missing provider secret | Fail closed before Live/embedding work | Restore scoped server-side injection |
| Gemini/provider failure | Preserve history; mark Live session failed | Reconnect within limit or retry later |
| Duplicate event | One logical effect | Idempotency key protects state |
| Parser/corrupt input | Keep original with visible failure | Correct source or use supported format |
| Lost derived index | Canonical artifacts remain | Rebuild compatible index |
| Migration/restore failure | Do not overwrite live state | Restore into isolation first |
Architecture
Failure and recovery
Failure behavior, data impact, and recovery routes.
See backup and recovery and defect register.