Verified recovery routines