Encrypted backup that restores a sample of your files every week and signs the result.
Arcamere encrypts your files on your Mac and stores them in your own S3-compatible bucket or in ours. Files are split into chunks and encrypted with AES-256-GCM under a key derived from your passphrase, and the manifests that list what you have are encrypted too, so the bucket holds ciphertext from top to bottom.
Every week Arcamere runs a restore drill. It restores a random sample of files through the same code path a real recovery uses, compares each one byte for byte against the hash recorded at backup time, and writes an HMAC-signed report. The reports roll up into one health verdict, so a vault that stopped running reads stale instead of healthy.
Arcamere includes a Model Context Protocol server with nine operations, so Claude, ChatGPT, or any agent can list snapshots, search, restore a file, run a drill, and read the health verdict against the same vault your command line uses. Online-only cloud files stay online while Arcamere lists them with a count and a size.
A random sample is restored for real, hashed, and compared with the hash recorded when the file was backed up. Any mismatch, missing chunk, or decryption failure is reported, and the report is signed.
Drill history collapses into one state: healthy, stale, pending, or failing. A new vault whose first drill is not due reads pending, and a vault that stopped running reads stale.
Your passphrase derives the key on your Mac, on backup and on recovery. Recovering on a new machine takes the bucket coordinates and your passphrase.
Use Cloudflare R2, Backblaze B2, Wasabi, MinIO, Amazon S3, a local disk, or network-attached storage.
Say find the contract draft from before the March edit and put it on my desktop. The assistant searches snapshots, restores the file, verifies its hash against the manifest, and reads the health verdict.
Content-defined chunking means an unchanged tree adds no new chunks. Symlinks, Finder tags, extended attributes, empty directories, permissions, and timestamps round-trip, and restores are guarded against path traversal.