Complete procedures with a way back.

Deploy Loki 3.7 with Alloy 1.18, authenticated tenant isolation, bounded labels, pre-export redaction, object-store durability, compactor retention and an isolated recovery drill.

Design RPO and RTO, pin Velero 1.18, choose one volume-protection path per PVC, secure independent object storage, create scheduled recovery points, restore into isolation, verify bytes and application behavior, and operate drills without confusing backup completion with recoverability.