=== does the recovery unit manifest carry hashes? ===
{
  "schema_version": 2,
  "app_name": "kimai",
  "display_name": "Kimai",
  "controller_version": "0.227.1",
  "created_at": "2026-08-31T02:16:24Z",
  "drive": "/mnt/sys_drive",
  "namespace_root": "/mnt/sys_drive/felhom-data",
  "image_pins": [
    "kimai/kimai2:apache-2.57.0",
    "mariadb:11.6"
  ],
  "secret_env_vars": [
    "DB_PASSWORD",
    "ADMIN_PASSWORD"
  ],
  "data_key_env_vars": null,
  "secret_source": "portable secrets (data keys, DB passwords, internal signing secrets) are IN this unit's compose/app.yaml (0600); internet-reachable admin logins are NOT, and come from the guest's app.yaml or are regenerated on restore",
  "config_files": [
    "docker-compose.yml",
    ".felhom.yml",
    "app.yaml"
  ],
  "db_dumps": [
    "kimai-mariadb.sql"
  ],
  "volume_dumps": [
    "kimai_kimai_db_data.tar",
    "kimai_kimai_var.tar"
  ],
  "checksums": {
    ".felhom.yml": "95beb458a42391af4bf78429decfbc60537d8d53d61bea68c38687bcc7fa0d23",
    "app.yaml": "9192dec10e5aae76c2787d0e82ad39115d43f7011519f854bc06534f930c3e9c",
    "docker-compose.yml": "c25029f8bd16e6252dceda0b4e87917a8b9ce0b9ad6bdbfc82fa8d4f630e6310"
  },
  "portable_secret_env_vars": [
    "DB_PASSWORD"
  ],
  "o

=== does restic ls --json expose per-file content hashes? ===
{"time":"2026-08-31T02:16:30.041113131Z","parent":"84542ec89b96fd05d504ca33e5f391a959c2e42e94353ca53e2e46929791d576","tree":"00bbec71aced8301be6100c4ac5de6142defbbf0d24b44898a5dfff059e9969f","paths":["/mnt/sys_drive/felhom-data/backups/primary/kimai"],"hostname":"demo-hp","username":"root","tags":["felhom-offbox","kimai"],"id":"e7dcf8fde91a54f655175b60da2e45cfa7b907be78bc9ac5ead5601f3eaf077d","sho
{"name":"mnt","type":"dir","path":"/mnt","uid":0,"gid":0,"mode":2147484141,"permissions":"drwxr-xr-x","mtime":"2026-08-21T16:00:39.422914481Z","atime":"2026-08-21T16:00:39.422914481Z","ctime":"2026-08-21T16:00:39.422914481Z","struct_type":"node"}
{"name":"sys_drive","type":"dir","path":"/mnt/sys_drive","uid":0,"gid":0,"mode":2147484141,"permissions":"drwxr-xr-x","mtime":"2026-08-21T16:01:03.794262171Z","atime":"2026-08-21T16:01:03.794262171Z","ctime":"2026-08-21T16:01:03.794262171Z","struct_type":"node"}
{"name":"felhom-data","type":"dir","path":"/mnt/sys_drive/felhom-data","uid":0,"gid":0,"mode":2147484141,"permissions":"drwxr-xr-x","mtime":"2026-08-21T16:31:03.891800035Z","atime":"2026-08-21T16:31:03.891800035Z","ctime":"2026-08-21T16:31:03.891800035Z","struct_type":"node"}
