The pre-deploy mongodump kept InteractionSalt, the day's salt that the owner decided must be destroyed at each rollup: a dump kept seven deploys long let the day's actor hashes be reversed. It is excluded now, and the deploy refuses a dump that still names it (mongorestore's dry run lists every collection). The dumps already on the box still hold old salts; removing them waits for the owner. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw