Write-once, by construction
Every backup is addressed by the hash of its own content. There is no code path — anywhere in this system — that overwrites a version that already exists.
One protected machine, not storage
Every version of every file is written once and never overwritten — not by the software that backs it up, not by whoever holds the machine's own credentials, not by an attacker who has taken both. Restoring any point in time, one file or the whole machine, is free and unlimited, always.
Every backup is addressed by the hash of its own content. There is no code path — anywhere in this system — that overwrites a version that already exists.
The credential your machine holds can write and list. It was never given the words to ask for a delete, and the one place that could still block a delete anyway — the storage layer itself — does.
A recovery drill restores a real file to a real temp path on a schedule, every week, for every machine, and tells you when it last actually worked.
A real app — no terminal, nothing to configure. It generates its own key on this machine and never sends it anywhere; write the recovery phrase down before the first backup runs, because it is the only copy that exists once this machine is the thing being protected against.
SHA256SUMS — verify what you downloaded before you run it.
Built and running — status, alerts, snapshots, drills, all live. Not yet in the App Store; ask to have it installed on your device directly.
Built and running — status, alerts, snapshots, drills, all live.
Everything the app does, scriptable: coldfreeze-agent backup,
watch, restore, drill.
Same account, same protected machine — pick one or run both.
$555/mo up to 555 GB · $1,111/mo per TB above that · annual at 10× the monthly rate. One protected machine is the unit. Storage after deduplication is what's metered — a machine with five years of daily snapshots and one changed file a day can cost far less than its raw history would suggest.
Luminous Prosperity Inc. · Cold Freeze