Every captured change carries its SHA-256-addressed content in BLOB_STORE. Restoring writes that content back to the original path — current file gets backed up to <path>.drift_restore_backup_<epoch> before overwrite.
| Target file | /var/www/vhosts/webstls.com/httpdocs/update_storefront_field.cgi |
| Site | WebSTLs /httpdocs (SSH agent) on WebSTLs (webstls.com) |
| Kind | ssh_agent |
| Captured at | 2026-07-01 22:27:09 |
| Captured SHA | 451b103abc8830c17b8e09731b6c59f83c11c8b1cca2487f3b16f01bc49a7b72 |
| File present | yes |
| Size | 152 bytes |
| Current SHA | 451b103abc88 |
| Same as captured? | yes -- no-op |
<target>.drift_restore_backup_<epoch>, writes the captured content, verifies SHA post-write.