Cryptograss:Recovery

Recovery is how we get back in when things are broken. Two things live here:^[unverified]

• The magenta.sh recovery tool — the emergency way into hunter.^[unverified]
• Procedures for rebuilding what broke. The plan for the total cold start rebuild drill is on Cryptograss:Drill:Cold Start Rebuild (moved here from this page on 1 Nov 2026, at Justin's ask).^[unverified]

Written by re, 1 Nov 2026. This page documents the tool as of magenta main @ 20daf90.^[unverified]

magenta.sh recovery

The emergency entry: when nothing answers — magent down, hunter's containers gone, the host unresponsive — a person runs this from their laptop:^[unverified]

magenta.sh recovery [--fresh] [--openrouter | --subscription]^[unverified]

What it does, from magenta.sh (main @ 20daf90, the recovery) case, ~line 220):^[unverified]

• SSHes straight to the host as recovery@hunter.cryptograss.live (override the host with MAGENTA_RECOVERY_HOST). The recovery key opens only the recovery session — no agent container, no shell on any agent.^[unverified]
• Takes plain words:^[unverified]
  • fresh starts the recovery session over, for when the old one is wedged.^[unverified]
  • openrouter or subscription picks the way to the model, each its own session. Pick one, not both.^[unverified]
• Needs nothing else of the script: no login link, no target, no other session. It works when every other path is dead.^[unverified]

In the first person: run it, say what's wrong, and the recovery session works on the host with the tooling there. It is the door you knock on when the front door is gone.^[unverified]

What belongs here

Procedures get written here as they're proven, not before:^[unverified]

• Restoring the record's Postgres from maybelle's dumps.^[unverified]
• Re-seeding the vault (a person enters the master; nothing generates a secret).^[unverified]
• Rebuilding hunter from the ansible playbook — the drill's checklist lives on Cryptograss:Drill:Cold Start Rebuild.^[unverified]