Recovery — Continuity
Preservation is a separate discipline from protection.
Security remains operational under pressure.
Safe Mode and COLOSSEUM coordination. Under a severe incident Sentinel preserves control, identity and evidence capture rather than shutting everything down, and verifies recovery once state is restored.
Sentinel
Protects and observes.
Sentinel detects the incident, enforces the boundary, preserves the evidence and coordinates the response. It signals COLOSSEUM when state must be protected, and verifies integrity once recovery has run.
AXIS COLOSSEUM
Preserves and recovers.
COLOSSEUM is the AXIS backup, continuity, recovery and preservation system. It holds verified restore points and performs recovery. It is a separate system with a separate mandate, and the two are never merged.
During an incident
The handshake.
Sentinel requests preservation of critical state at the moment of detection, before any remediation that could overwrite it. COLOSSEUM confirms a verified restore point. Sentinel records that confirmation to Ledger, so the continuity position at the time of the incident is part of the evidence rather than a later reconstruction.