Identity recovery is less about bringing servers back online and more about proving that authentication, authorization, and trust can safely resume.