# P25 R02 cleanup / recovery

This STEP does not change Machine Git or database schema.

Normal success cleanup is part of the live test itself:

- VM100 synthetic lifecycle peer removed;
- VM100 selector membership removed;
- disable ACK recorded before tunnel-IP release;
- synthetic VM121 business rows removed;
- agent path/timer remain disabled.

On a live-test failure the VM121 driver first attempts an idempotent VM100 lifecycle disable and only removes synthetic DB rows after runtime absence is confirmed.

A fresh encrypted PostgreSQL backup is retained under `/root/router-ops-backups/p25-r02-*` and is restore-tested before mutation. It is an emergency recovery artifact, not an automatic post-core rollback mechanism. Do not restore it automatically after a successfully proven live enable/disable core merely because a later report/publication check failed.