- Capture the docker compose ps status before testing its output, and scan the Litestream log with grep's status read explicitly: 0 is a logged error, 1 is no match, anything else fails the verification. - Run both clean-ups on exit whatever happens, keep any failure, and print the pre-deploy restore point only after every check and both clean-ups succeeded. - State that the live snapshot expects the existing -wal and -shm, list their ownership after the snapshot, and say to stop and check the service state if a root-owned sidecar appears. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>