## 2026-09-16T11:14:14Z ep0 READ-ONLY listing of tester-1's namespace (nothing removed, nothing written)
+================+====================+=========+
| name           | path               | comment |
+================+====================+=========+
| felhom-offsite | /mnt/pbs-datastore |         |
+================+====================+=========+
--- groups in namespace tester-1:
Error: error building client for repository felhom-offsite - no password input mechanism available
## 2026-09-16T11:14:24Z ep0 listing by filesystem (read-only; the client needs a password we deliberately do not hold here)
--- namespaces:
demo-felhom
demo-hp
tester-1
--- tester-1 groups:
total 12
drwxr-xr-x 3 backup backup 4096 Sep 14 16:04 .
drwxr-xr-x 5 backup backup 4096 Sep 14 15:48 ..
drwxr-xr-x 2 backup backup 4096 Sep 15 08:33 ct
--- ct groups and their snapshots:
## 2026-09-16T11:14:42Z ep0 deeper listing (read-only)
--- tester-1/ct contents:
total 8
drwxr-xr-x 2 backup backup 4096 Sep 15 08:33 .
drwxr-xr-x 3 backup backup 4096 Sep 14 16:04 ..
--- snapshots per group:
  group: /mnt/pbs-datastore/ns/tester-1/ct/*/
--- other namespaces, for scale:
9201
## CONCLUSION (nothing was removed by this session; ep0 was read only)
##  Before the drill (09:12:21Z): ns tester-1 existed with an EMPTY ct group dir - the old box's
##    snapshots had been removed the previous night, with the operator's explicit yes.
##  After the whole drill (11:14:42Z): ns tester-1/ct is STILL EMPTY.
##  Why: this box never had an off-site tier at all. The re-issue failed on the endpoint token's missing
##    Datastore.Modify grant (R-534), so no descriptor, no secret, no upload path. The box therefore
##    wrote ZERO snapshots off-site during the entire drill.
##  For scale, the neighbouring namespace demo-hp/ct holds group 9201 - proof that this listing method
##    DOES show groups when they exist (positive control).
##  Consequence for Phase 3: "restore one DB-backed app from the off-site tier onto scratch 9202"
##    CANNOT BE WALKED on this box. Not skipped for time - there is no off-site copy to restore from.
