It’s actually worse. Restic is very strict regarding upload problems: failed uploads are retried until they succeed or if it doesn’t work after 10 retries, then the whole backup operation is aborted. Thus, to end up in a broken state, the storage backend has to confirm that the upload was successful, but afterwards lose the uploaded data anyways…