SynthVault Sealed Backup

💾

Create Sealed Backup

Snapshots the SynthVault catalog (vault.db, SQLite online-backup consistent) plus the sealed config, seals the bundle under the Customer iKey, and writes a .synbak to the destination you choose. Catalog only — no content blobs. Opaque without the customer master key.

Destination folder (absolute path or UNC share)

Also wrap for the off-host recovery key (recovery if the customer master is lost). Requires backup-recovery.key on the host.

🔎

Verify & Restore

Destination folder

Bundle

Verify

Quick (decrypt + auth) Deep (+ test-restore)

Restore

Restores into a staging copy — the live vault.db is untouched. Promote staging → live at a deliberate cutover step. Requires the restore_db permission.

I understand this restores into staging (live vault.db unchanged).