Exercise 3: What's Missing From "My Data Is Now Fully Protected" — Possible Solution ==================================================================== What's missing: Per this chapter's own warn-box, at least three real gaps remain even after completing the full capstone build: 1. No content-level integrity checking. "No checksumming or self-healing exists anywhere in this stack... a real limitation if bit-rot protection ever became an actual requirement." The RAID array protects against a whole disk failing, but nothing in this stack -- not mdadm, not LVM, not ext4 -- ever verifies that the data content itself hasn't silently corrupted while sitting on a healthy disk. "Fully protected" would need to specify protected against WHAT -- this stack protects against disk failure specifically, not bit rot. 2. No actual backup. "The snapshot taken in Step 3 is not a backup, per fs1-3's and fs1-6's own explicit warnings -- it lives on the same array it's protecting." If the entire RAID array were lost to something beyond disk failure -- theft, fire, a filesystem-level bug, ransomware (echoing fs1-7's own exercise on this exact point) -- the snapshot would be destroyed right along with the live data, since both live in the same volume group on the same physical array. Nothing in this capstone copies data to genuinely separate storage. 3. No /boot or GRUB setup was actually built. "No /boot partition or GRUB configuration was actually built here (that's grub1's own dedicated territory)." The capstone deliberately left this out, so a reader treating this chapter as a complete, bootable system is missing a real, necessary piece that was explicitly deferred elsewhere, not included implicitly. Why the reader's conclusion overstates the result: The capstone successfully builds and proves out real redundancy against a specific, well-defined threat -- a single physical disk failing -- which is a genuine, valuable, and correctly-implemented piece of protection. But "fully protected" implies protection against every kind of loss, which the chapter's own warn-box explicitly denies across three separate, real gaps that were deliberately left out of scope rather than accidentally forgotten. WHY THIS WORKS AS AN ANSWER ------------------------------ This lists all three specific gaps the chapter's own warn-box names, rather than picking just one, and explains precisely what "protected" actually means for this specific stack (disk failure only) versus what the reader's unqualified claim implies (protection against everything).