73e5a003f2
Offsite restore-test now runs unattended on the agent-token path (agent v0.68.0): tier-aware restore-task timeout (pbs→120m, local→10m). The scratch-band VM.Allocate follow-up was a phantom — the scratch restores INTO /pool/felhom (ACL already grants it); the earlier 403 was the 10m-timeout consequence. No ACL/host-install change. doc-06 S4 row + runbook §4b updated. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6