[ulysses]

I like DO, and appreciate them being open with the outage timeline. Two thing really jump out at me though:

1.) If they have a time-delayed replica, why not recover it to the point-in-time before the issue, and then switch master over to it?

2.) They took a backup of the replica, moved the backup to the master, and then restored from it. Do they not have direct backups of the master? A time-delayed replica is no replacement for valid backups.