Graviton parent-host recovery

Started 2026-09-10 22:15:30 UTC for the first production epoch. Public S3 puzzle, bundle and historical Nitro evidence were verified against production PCR0 before starting. Uses the installed production native solver, full RandomX mode, one thread pinned to parent CPU 15, nice 19, 4 GiB memory limit and a private network namespace. This is independent of the existing Hetzner solver.

Systemd unit: attested-relay-host-recovery-591e6cca.service, enabled at boot, restarted on failure. Checkpoints append every 10,000 hashes. State directory: /var/lib/attested-relay-host-recovery/591e6cca14f40c68682573c390194ecab2e55ffbc27d4dac7a82f968639faebe. The recovered key will be written to epoch.key only after its commitment matches; it is not logged or automatically published. Presence of that file prevents a new boot from repeating completed recovery. Previous artifacts are preserved.