docs: close out Anita migration (archive verified, frozen copy deleted, stale S3 prefix purged, backup monitor findings)

backup-plan.md

@@ -167,6 +167,7 @@ wphost02 was deleted from the Hetzner account on 2026-08-28. Its backup job has
 hermes-vps-backups/
 ├── hermes-full-backup/     — Full Hermes daily (tar.gz)
 ├── live/                   — Hermes live sync (every 15 min)
+├── decommissioned/         — archived copies of decommissioned systems (profile archives)
 ├── live-sync/              — Old sync format (deprecated)
 ├── root-backup/            — /root essentials (Core uses the flat legacy prefix)
 │   └── <host>/             — per-host prefix (`anita-mnz`, ...)
@@ -240,12 +241,19 @@ These paths contain data from services that migrated off Core (Jul 28, 2026) or
 | `core/komodo/` | Stale 11 days | **Safe to delete** — Komodo migrated to App1; new backups at `app1/komodo/` |
 | `caddy/` | Unused | **Safe to delete** — Never populated |
 | `snapshots/` | Unused | **Safe to delete** — Never populated |
+| `live/profiles/anita/` | Purged 2026-09-11 | **Deleted** — 20,551 objects / 5.0 GB of the frozen Core copy of Anita's profile, pushed by the 15-minute sync before it was paused Sep 3. Superseded by `decommissioned/anita-core-frozen-profile-20260911-1732.tar.gz` |
 
 ## Unbacked Services
 
 These services are running in production with **zero backup coverage**:
 | Unbacked | *(none)* | N/A | N/A | All services are backed up as of 2026-08-08 |
 
+**Done 2026-09-11 (Anita migration closeout).** The frozen Core copy `/root/.hermes/profiles/anita` (8.0 GB, excluded from live sync after the 15:53 cutover) was archived to
+`s3://hermes-vps-backups/decommissioned/anita-core-frozen-profile-20260911-1732.tar.gz` — 2,786,082,561 B, sha256 `b457fa7f…b3dc`, 21,206 entries — then deleted, reclaiming 8 GB (125 GB → 117 GB used).
+The archive was proven by downloading the object back and matching the sha256 against the local tarball **before** anything was removed. The 8 GB was almost entirely quarantine
+artifacts from the Sep 3/9/10 SQLite corruption events (`corrupt-20260903/09/10`, `pre-rebuild-20260910`, `recovered-20260910`); the live profile had already been proven migrated
+(memories, `.env` and the six cron job IDs identical on the new box, which carries one more skill and two more messages).
+
 **Gap found and closed 2026-09-11 (anita-mnz):** `root-essentials-backup.sh` correctly excludes `*.db` so it never archives a
 live SQLite file, but nothing replaced it, so after the box was provisioned Anita's conversation store (974 MB), the cron
 execution DB, notepad, wisdom and verification DBs had **zero** backup coverage. Core has `hermes-backup.sh` doing this job;