# TED Recovery Verification

TED Operations creates recovery evidence from public on-chain state for all 11 configured TED Programs. The Operations system is read-only with respect to recovery: it does not sign transactions, move funds, pause Programs, upgrade Programs or finalize them.

Public recovery evidence may contain:

- network and cutoff slot;
- Program IDs and observed slots;
- account and transaction counts;
- deterministic state roots and transaction roots;
- full-state and event-archive roots;
- snapshot bundle hash;
- recovery rehearsal PASS/FAIL checks.

Public recovery evidence must not contain raw account payloads, filesystem paths, database records, private reports, attachments, contact information, Admin identities, authentication data, encryption keys, RPC secrets or wallet material.

A recovery rehearsal recomputes the required roots and verifies core invariants such as Membership uniqueness, Matrix/identity preservation, open-obligation preservation, non-negative balance accounting, System Program Registry preservation and replay consistency.

The public evidence is evidence for human review. It does not authorize or execute a migration, repair or finalization action.