once the auto-backups are in place
create an action that downloads the latest database from heroku and compares it to the latest known good state.
If the known good state data isn't equivalent to the heroku ones, fail.

This might be possible by just dumping dbs, filtering out heroku custom things and checking for string equivalence