Lumaion · Recovery infrastructure

Recovery Kit 0.2.0

Public, secret-free tooling for an enrolled recovery device to fetch an encrypted Lumaion control-plane envelope, decrypt it locally, verify the recovery manifest and submit a cryptographic restore proof.

Envelopev3 · X25519 + HKDF-SHA256 + AES-256-GCM

Restore proofDecrypt challenge + recovery-device Ed25519

Owner bearerNot included and not required by the recovery-device flow.

Private continuityNot included in the public kit. Cloud envelope remains encrypted.

Tooling readiness is not the same as disaster-recovery completion. Lumaion keeps disaster_recovery_ready=false until a real enrolled off-device decrypt proof succeeds and primary-device recovery-key separation is verified.

Release manifest · SHA256SUMS · Archive · Archive checksum

The archive contains only recovery-device-client.mjs, restore-control-plane-v3.mjs, documentation and integrity metadata.