The pre-migration baseline was captured 2026-10-30 and the post-restore
checker diffs against it, so drift since then (app image bumps, newer
backup, more portal rows) made a healthy box look wrong.
Regenerated from the live box with the new capture-migration-baseline.py
(same schema/keys, idempotent). Reflects the box as of 2026-11-02.
Snapshot records apps/images/env-names/backup config and data fingerprints for a
post-restore diff. Also resolves an open unknown: the off-box JSON carries only
accessKeyId, so the S3 secretAccessKey must be retrieved before the window. The
restic passphrase is fine - it is on the agent host, which is not migrating.
inference-bot