takeout

Overview ¶

Command takeout is the admin Take-Out extractor CLI (Path A, decisions.md).

It copies a Space's ciphertext out of the S3 target into a self-contained Take-Out directory. It works with OpenCloud fully down — it talks to S3 and nothing else — and it **cannot decrypt anything**: there is no flag, prompt, or environment variable here that accepts a Recovery Key, a Data Key, or a repository password, and none may ever be added (decisions.md #2, #15).

The admin hands the resulting directory to the user, who decrypts it locally with the `decrypt` command and their own Recovery Key.