What an isolated Navidrome database recovery rehearsal proved, how I kept it separate from production, and what remains untested.

The restore checks I am using after discovering that a backup job completing does not prove the data can be recovered.