Someone Force-Pushed main. The Commits Weren’t Gone — reflog Still Had Ninety Days

A force-push to main wiped 14 commits from the visible history, causing a 47-minute release block. The commits were recoverable via git reflog in six minutes. The post walks through the exact recovery sequence: fetching the remote reflog, identifying the last good commit hash, creating a named recovery branch, and restoring main with --force-with-lease. It also covers fallback strategies when reflog is empty (local clones, git fsck), and the guardrails added afterward: branch protection, a --force-with-lease alias, a pre-push hook blocking force to protected branches, and quarterly Git disaster drills.