Glossary: Incident Response and Resilience

append-only

Also written: --append-only

A mode in which clients can add new backups but can't delete or change old ones. Kettle & Crane's rest-server runs in this mode, so even an attacker with the restic password can't remove the snapshots.