Backups have been proven by a full restore test, not just assumed

A backup that has never been restored is a hypothesis. A complete workload was restored from backup onto spare capacity, started in isolation with its network disconnected so it could not disturb the running original, and checked byte-for-byte against it.

It matched. The restored copy was then removed.