Skip to main content

Safe verification pattern

Use an isolated mount namespace, unmount the bind target there, and inspect the underlying directory.

Rule

Never assume a bind mount deleted data until you inspect the underlying directory.