=== the 0-backups blip: what does the hub SHOW, and did anything ALARM? ===
captured 2026-08-20T09:31:38+00:00
demo-hp agent restarted 2026-08-20 09:15:46Z; two reports since, both '0 backups'

--- hub host page, the DR/Backup region (tags stripped) ---
 
 
 
 
 
 DR / Backup 
 
 
 DR Recipe 
 present 
 
 
 Key Escrow 
 present · 1 superseded escrow blob(s) retained 
 
 
 
 
 
 Console access 
 
 
 
 User 
 root@pam 
 
 
 Password set 
 29d ago 
 
 
 
 &bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull; 
 Reveal 
 Copy 
 
 
 Break-glass credential for the PVE web console at https://&lt;host-ip&gt;:8006 (realm: Linux PAM standard authentication). Copy puts it straight on the clipboard without showing it; Reveal displays it for 60&nbsp;s. Either one is recorded on the customer's event timeline. Last vaulted value — if root@pam was changed on the box without re-vaulting, this is stale.
 
 
 
 
 
 
 
 
 
 var consolePwState = typeof consolePwState !== 'undefined' ? consolePwState : {};
 var consolePwMask = '••••••••••••••••';
 function consoleHint(hostID, msg) {
 var h = document.getElementById('console-hint-' + hostID);
 if (h) { h.textContent = msg; }
 }
 function maskConsolePassword(hostID) {
 var st = consolePwState[hostID];
 if (st && st.timer) { clearTimeout(st.timer); }
 consolePwState[hostID] = null; 
 var code = document.getElementById('console-pw-' + hostID);
 if (code) { code.textContent = consolePwMask; }
 var reveal = document.getElementById('console-reveal-' + hostID);
 if (reveal) { reveal.textContent = 'Reveal'; }

--- CONTROL: same region for demo-felhom (still 0.129.0, never restarted) ---
763: DR / Backup 
764- 
765- 
766- DR Recipe 
767- present 
768- 
769- 
770- Key Escrow 
771- present · 3 superseded escrow blob(s) retained 
772- 
773- 
774- 
775- 
776- 
777- Console access 
778- 
779- 
780- 
781- User 
