vault-db is the one true worst case: tightest RPO (5 min) because it is irreplaceable — unlike Neo4j (RPO 1440 min), which is rebuildable from the ClickHouse log.