How GTM Inboxes uses this term
GTM scans for failed resources, records recovery events scoped to the workspace, applies containment such as pausing inboxes or gating exports, and requires explicit operator approval before destructive fixes like credential rotation or domain replacement run.
Contain first, fix second
The workflow separates containment from repair. Containment is safe and immediate: pause the inbox, retire the IP, block the export. Repair actions that change credentials or replace resources wait for operator approval and run fail-closed, leaving the resource untouched if any step fails.
What customers see
Customer-facing readiness output shows redacted recovery state and next steps. Operator-only diagnostics stay internal, and event text avoids assigning fault to any mailbox provider.