I put off the download moving window to integrate snapshot/recovery, and I think I'll take it a little further, so that there's an automated/configurable snapshot based on write volume, and automated recovery on startup with corruption detected. These should be one day work combined.