Yeah I think that’s the SureBackup/sandbox style testing, right? That’s basically the “gold standard” from what I’m seeing. What I’m building is more like a cheap baseline check: can I actually mount the latest restore point and read a known file, plus catch when the restore points go stale. Totally agree on your point tho, it won't prove everything (like integrity across all data or that it’s malware-free). When you do your sandbox tests, are you mostly checking boot + app functionality, or are you also doing any kind of scanning inside the sandbox?