Your First Backup and Restore: Engineering Speed and Security

Your First Backup and Restore: Engineering Speed and Security

You have created your Realm, installed the StateWarden Agent, and established the secure mTLS cryptographic bond. It is now time to execute your first data protection operation.

StateWarden redefines the backup process. We do not simply "copy files". The system is engineered for absolute resilience, zero-knowledge privacy, and maximum efficiency.

The Backup Process

The entire flow is managed centrally via your Control Plane (Artemis) from the Dashboard. You never need to directly access the target machine.

  1. Initiate the Task: In the Devices view of your Dashboard, select your paired device and configure a new backup policy or manually trigger an ad-hoc backup.
  2. Select Target Paths: Choose the directories or entire volumes you wish to protect.
  3. Smart CBT (Changed Block Tracking) Analysis: This is where the HighSec performance shines. StateWarden bypasses the limitations of standard operating system APIs (like checking modified timestamps on millions of files). Instead, our Agent performs a deep analysis directly at the filesystem level. For instance, on Windows, we parse the NTFS USN Journal directly. This ensures lighting-fast incremental backups with near-zero performance overhead, as we only read the exact blocks that have changed since the last snapshot.
  4. PrimeKEM Engine Application: Before a single byte is transmitted over the network, the Agent applies our proprietary PrimeKEM engine. This engine utilizes an "Cascade Cryptography" architecture, where your data is chunked and subjected to multiple cryptographic transformations using your specific Master Key (or the device's local key). Industry-standard AES-256-GCM is utilized merely as the outermost layer of defense.
  5. Driad Ingestion: The heavily encrypted payload is then streamed directly to your designated Data Plane (Driad) node within your Realm's geographic region, guaranteeing data residency and GDPR compliance.

The Restore Process

A backup system is only as good as its restore capabilities. StateWarden is built to prioritize Time-to-Recovery (TTR).

  1. Browse Snapshots: In the Restore view of your Dashboard, navigate through the temporal snapshots of your data. Because StateWarden uses advanced deduplication on the backend, every incremental backup is synthesized and presented to you as a complete, full snapshot of the point-in-time state.
  2. Execute the Recovery: Select the files, folders, or entire volumes to restore and trigger the task.
  3. Sparse File Optimization (Zero-Skip): StateWarden agents employ highly optimized recovery logic. For example, during volume restorations, the Agent leverages "BMR Zero-Skip" technology. This prevents unnecessary physical writes to SSDs and bypasses standard OS limitations by intelligently skipping zero-chunks, drastically accelerating the restore process.
  4. True Decryption: The data is pulled back to the Agent and decrypted locally. The StateWarden infrastructure never possesses the keys to decrypt the payload on the server-side.

Was this article helpful?