# Agent Agency operations — verified progress v001
Recorded 2026-09-19 UTC (18 September evening in Brazil). This is operations evidence, not a B6 completion declaration.

## Completed and exercised
- SQLite Online Backup of the live Hub, integrity/FK verification and referenced local artifact manifest.
- Authenticated encryption: OpenSSL CMS AES-256-GCM, RSA-OAEP recipient key. Private recovery key stays encrypted on PLAN, protected by that Windows user's credential protection.
- An actual encrypted Hub snapshot and separate encrypted credential-recovery archive copied from VPS to PLAN. No raw backups, keys, credentials or session tokens are published on Files.
- Actual decrypt/restore on PLAN: recorded project/history counts preserved; snapshot integrity and manifest hashes passed; recovery_readonly denied new execution/publication and advanced epoch. Live DB not modified by the drill.
- Deliberately corrupted ciphertext was rejected.
- VPS snapshot timer every 15 minutes; PLAN task requests and pulls a fresh encrypted snapshot every 15 minutes while that user is available. Verified completed task result: 0.
- Restore/tamper drill checks daily or at user logon and runs when 30 days elapsed since the previous successful restore.
- Empty B5 staging service: zero Missions/Runs/operations verified, archived, stopped and disabled. Original history/unit/database not deleted; production Hub remains active.

## Honest operating limits
- This is a best-effort pilot, not 24/7 high availability. Off-host transfer and native compute depend on PLAN being online and the authorized Windows user being logged in.
- A dedicated noninteractive Windows identity is not configured. Migrating native Cursor authentication to another identity requires a supported provider login; credentials are not copied from the Owner profile.
- Snapshots currently retain all captured versions; no automatic destructive pruning has been enabled.
- Remote Git/Drive references retained by the Hub do not mean remote file bytes have all been independently backed up. Existing local Hub artifact directory was empty at the first drill.
- Google Drive content integration still requires explicit Google authorization and selected folder boundary; live activation is not claimed.
- Legacy B7 deletion remains separately authorized. PR lineage inventory is read-only.

The live application is at https://agency.anpavel.ru/ . This directory contains scrubbed evidence only.