tokenchronicle-backup

TokenChronicle iCloud Backup

Resolve the plugin root and prefer its matching signed executable under

bin/macos-arm64/tokenchronicle/ or bin/macos-x86_64/tokenchronicle/. If an installed plugin has neither matching executable, report that the macOS

client has not been published for this architecture and stop. Never download or substitute a binary.

Run the read-only readiness command first. If TokenChronicle is not initialized, switch to guided

setup before offering a snapshot. If daily protection is inactive, disclose that fact separately; a

backup snapshot does not activate daily archiving.

1. Run tokenchronicle backup status and report whether macOS hdiutil and iCloud Drive are available.
2. Explain before every first snapshot:

• iCloud synchronization is not an independent backup;
• the encrypted snapshot leaves the Mac through iCloud Drive;
• the live archive, configuration, credentials, locks, and logs stay local;
• Advanced Data Protection is recommended;
• a full snapshot can require roughly the archive size in iCloud capacity and temporary local space.

1. Never request, receive, repeat, store, log, or place a backup password in chat or a command argument.
2. Ask the user to run tokenchronicle backup create --confirm-cloud-backup in their own interactive

terminal. The CLI securely prompts twice for a password of at least 12 characters.

1. Report only the resulting snapshot path, receipt path, size, file count, SHA-256, and verification state.
2. Do not schedule backups, enable feedback, migrate history, move the live archive, or delete snapshots

without a separate explicit request.