Journeys › sched-006
Site outage: Jordan recovery path
When a whole site goes dark, Jordan keeps three or more live copies (two in the UK), every node keeps a lawful path back, and every workload is restored elsewhere with receipts.
Sender Erling (adversary)Receiver Jordan (backup and recovery)Regulation REG-NIS-10, REG-NIS2-21, REG-DORA-12, REG-ISO22301
- Erling blacks out a site that holds a Jordan copy
- Press Self-recover
- Check Jordan has three or more live copies
- Check every node has a lawful path back
- Return the site
Receiving side: the Jordan page shows the new copy and its receipt. Failure path: Black out a second Jordan site at once → Jordan copies itself again so three remain; no node is left without a path.