# Legacy watch, run 11: ledger (redacted)

The complete Octopus ledger of run 11 of the legacy-watch experiment, described in
[The owner is gone. Gemini kept the lights on.](https://vechenkov.info/blog/legacy-watch)

## What is in `run11-ledger-redacted.tar.gz`

- `ledger/movements.jsonl`: every movement in order (arrivals, tool calls, results, reasoning, turn ends), one JSON object per line.
- `ledger/blobs/<sha256>`: the content each movement points to, addressed by its SHA-256.
- `ledger/metadata/`: per-movement metadata.
- `run11-trace.md`: the ledger rendered as text, as it was watched live: messages, reasoning summaries, and calls with their arguments.
- `run11-trace-full.md`: the same with tool results.
- `REDACTIONS.json`: every file that was changed, what was replaced, and the blob's SHA-256 before and after.

## What was redacted

Only secrets, each replaced by a marker such as `[REDACTED:openrouter-api-key]`:

- the OpenRouter API key, the Codex OAuth tokens, Claude OAuth tokens and any other API key or token pattern;
- the mailbox app password and the VM user's password;
- the 24-word recovery phrase from `~/Documents/ton wallet.txt`.

Nothing else was removed or edited. A blob that held a secret no longer matches its file name; `REDACTIONS.json` lists both hashes for each one.

The ledger index (`ledger-index.sqlite`) is not included: it is derived from `movements.jsonl` and can be rebuilt.

## Reading it

Times in the ledger are Unix milliseconds of the guest clock. The guest clock was moved forward to each scheduled wake during the run; the report lists every such intervention.