MENSARA.AI · A GOVERNED MIND, IN YOUR ACCOUNT

MENSARA.AI · BACKUP, RESTORE AND OWNERSHIP · MACHINE SURFACE · TEXT/MARKDOWN

---
title: Backup, restore and ownership
canonical_url: https://app.mensara.ai/how-it-works/backup-restore-ownership
feature: backup-restore-ownership
audience: llm-agent
last_verified: 2026-08-11
availability: available-now
signup_supported: false
interfaces:
  - portal
  - cli
---

# Backup, restore and ownership

Defines owner-controlled Git backup, separate key recovery, fresh-box restore, reconnection boundaries, export, deletion, and team ownership transfer.

## Concept model

- Knowledge backup and secret recovery are separate artifacts.
- Fresh-box restore reconstructs the Mind from owner-controlled material.
- Ownership controls infrastructure, export, transfer, and deletion.

## Capabilities

- Back up plain-file memory and Git history off the primary box.
- Restore onto a clean replacement box with verified recovery material.
- Export knowledge or transfer team ownership explicitly.

## Prerequisites

- Access to the owner-controlled backup remote.
- Separate recovery material and identity verification.
- Authority as Owner for destructive, transfer, or restore operations.

## Authorization

- Only the Owner can approve ownership transfer or final deletion.
- Administrators may operate backup tasks only when delegated.
- A restoring agent must not infer or recreate missing secrets.

## Connection or use flow

1. Verify the backup and select a known commit.
2. Provision a fresh owner-controlled box.
3. Restore files, history, policy, and verified keys.
4. Test read-only access and receipt integrity.
5. Reconnect each external provider explicitly.

## Refusals and recovery

- Missing recovery keys: stop; do not fabricate replacements or claim full recovery.
- Unverified requester: refuse export, restore, transfer, or deletion.
- Corrupt or incomplete backup: preserve evidence and restore from an earlier verified point.

## Ownership and data boundaries

- The owner controls the knowledge repository and backup account.
- Provider credentials and model subscriptions are not part of the Git repository.
- Personal memory is not transferred with company ownership unless explicitly included by its owner.

## Availability and limits

**Available now** Off-box Git backup and fresh-box restore are supported. Keys and external credentials require separate recovery material.
- A repository backup alone cannot restore secrets or provider sessions.
- External systems must be reconnected explicitly after restore.

## Signup and provisioning

`signup_supported: false`

The human Owner approves the infrastructure account and recovery destination during provisioning. An agent may assist but cannot designate itself owner or receive the sole recovery copy.

No autonomous signup or provisioning endpoint is documented because none is offered today. An agent must stop and involve the human owner.

## System diagram

```mermaid
flowchart LR
  R[Knowledge repo] --> B[Owner-controlled off-box backup]
  B --> F[Fresh box]
  K[Separate recovery kit] --> F
  F --> V[Verify files, policy, identities]
  V --> C[Explicitly reconnect providers]
```

## Runnable example

```text
Recovery check:
- verify off-box Git remote and latest commit
- verify recovery kit is accessible to the human Owner
- restore to a clean box
- run read-only health check
- reconnect providers one by one
```

## Related

- [Multiplayer](https://app.mensara.ai/how-it-works/multiplayer)
- [Changes, approvals and receipts](https://app.mensara.ai/how-it-works/changes-approvals-receipts)
- [Setup and ongoing care](https://app.mensara.ai/how-it-works/setup-and-ongoing-care)