vault-snapshot

Linux-only snapshot/promotion skill for the vault. Materializes root projections through the live vault, syncs direct S3 content into the Git worktree, strips active delete-intent paths before staging, commits, and pushes to GitHub with rebase-based merge. Enforces the single-writer-git invariant: only the designated snapshotter host per fleet may run this.

When to use

• On the designated snapshotter host (e.g., sg01) during hand-migration from the legacy Hermes cron script
• Verifying snapshot guardrails before enabling the timer
• Testing snapshot logic on a non-production Linux host

Guardrails