Source and protected recovery

For agents: Read the complete native guide and current context.get capabilities. Use only implemented operations and preserve exact Account, app and environment authority.

Use apps.get with view=source, the intended environment and optional exact source revision. Follow all continuation cursors and verify full-file hashes. Preserve native configuration, migrations and assets with the source; silent truncation is an error.

Database queries and full recovery archives are different operations. resources.query gives an authorized bounded data result. A complete archive is started and downloaded by a signed-in owner/admin through the protected console flow, not sent through an agent transcript or an anonymous bearer link.

A recovery receipt states exactly what was captured or unavailable. apps.restore creates isolated resources from a supported snapshot; it does not silently overwrite live data. Verify restored bindings and code before an explicit production switch.