Recovery Protocol

Why No-Manifest Backup Recovery Matters: Eliminating Metadata Single Points of Failure

How centralized catalog databases and manifest files cause catastrophic restore failures, and how self-contained fragment headers guarantee permanent data recovery.

YourKeep Team2 min read
#No Manifest#Metadata Safety#Stateless Recovery#System Architecture

Why No-Manifest Backup Recovery Matters: Eliminating Metadata Single Points of Failure

In classical backup systems (such as Borg, Restic, Duplicati, or enterprise Veeam agents), data chunks are stored anonymously in a repository, while a separate Manifest File or Central Database Index maintains the mapping of chunk hashes to original filenames, directory hierarchies, and encryption salts.

While this architecture allows for fast deduplication, it introduces a devastating single point of failure:

If the manifest file or SQLite index corrupts, is deleted, or suffers bit rot, the entire repository of millions of encrypted data blocks becomes completely unrecoverable.


The Manifest Vulnerability in Action

[ Traditional Deduplicated Backup System ]
 ┌─────────────────────────────────────────────────────────┐
 │ Master Manifest / SQLite Catalog (Single Point of Loss) │
 └─────────────────────────────────────────────────────────┘
        │                │                │
        ▼                ▼                ▼
[Chunk 001.blob]  [Chunk 002.blob]  [Chunk 003.blob]  ... (Thousands of Chunks)

* Problem: If Manifest is missing or corrupt, all chunks are useless digital noise!

The YourKeep No-Manifest Architecture

YourKeep completely eliminates the concept of an external manifest or centralized catalog. Every single .keep fragment file is 100% self-describing and cryptographically autonomous:

+-------------------------------------------------------------------------+
| Magic Identifier (YKEEP)            | Format Protocol Version (0x01)    |
+-------------------------------------------------------------------------+
| Universal Container UUID (128-bit)  | Chunk Index (k) / Total Shards(N) |
+-------------------------------------------------------------------------+
| Minimum Quota Required (K)          | Master Payload SHA-256 Checksum   |
+-------------------------------------------------------------------------+
| AEAD Initialization Vector (96-bit) | GHASH Authentication Tag (128-bit)|
+-------------------------------------------------------------------------+
|                           Encrypted Data Shard                          |
+-------------------------------------------------------------------------+

Advantages of No-Manifest Recovery:

  1. Zero Metadata Loss Risk: There is no index database that can corrupt. The metadata lives safely inside every single fragment header.
  2. Stateless Reassembly: Simply point the YourKeep recovery tool at any directory containing valid fragments. The engine inspects the headers, groups matching UUIDs, verifies integrity checksums, and restores your files.
  3. Resilience to Partial Media Destruction: You can lose 4 fragments completely, rename the remaining 6 fragments randomly, and recovery still succeeds with 100% precision.

Conclusion

A backup system that depends on an external catalog file is only as strong as that single catalog. Eliminate external manifests to achieve unbreakable data durability.