wiki: compile peaceful-spirit (full) — Syncro refresh, VSS + address, root-log provenance

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

wiki/clients/peaceful-spirit.md

@@ -2,8 +2,8 @@
 type: client
 name: peaceful-spirit
 display_name: Peaceful Spirit Therapeutic Massage
-last_compiled: 2026-07-02
-compiled_by: GURU-5070/claude-main (update: deletion-report location)
+last_compiled: 2026-07-03
+compiled_by: HOWARD-HOME/claude-main (full: Syncro refresh + root-log provenance + VSS/address)
 sources:
   - clients/peaceful-spirit/session-logs/2026-05-10-recovered-setup-radius-authentication-for-vpn-access.md
   - clients/peaceful-spirit/session-logs/2026-05-10-session.md
@@ -17,6 +17,9 @@ sources:
   - clients/peaceful-spirit/session-logs/2026-07/2026-07-01-mike-pst-deletion-scope-shelton-admin-acl.md
   - clients/peaceful-spirit/AD-DC2-REBUILD-RUNBOOK.md
   - session-logs/2026-06/2026-06-29-mike-dataforth-nwtoc-pst-deletion-scope-birthbio-corruption.md
+  - session-logs/2026-06/2026-06-29-mike-birthbio-repatriation-and-pst-soap-recovery.md
+  - session-logs/2026-07/2026-07-02-mike-pst-reports-ezfag-tags-unifi-adoption-bardach.md
+  - session-logs/2026-07/2026-07-02-mike-crowdstrike-rollout-365-appsuite.md
   - clients/peaceful-spirit/server.sops.yaml (vault)
   - clients/peaceful-spirit/server2.sops.yaml (vault)
   - clients/peaceful-spirit/vpn.sops.yaml (vault)
@@ -35,7 +38,7 @@ Massage therapy practice with two sites: Country Club (CC, primary — all serve
 
 - **Business name (Syncro):** Peaceful Spirit Massage (NOT "...Therapeutic Massage" — ID-based lookup required)
 - **Syncro customer ID:** `278525`
-- **Address:** 6650 N Oracle #100, Tucson
+- **Addresses (two sites):** CC / Country Club (primary — all server infrastructure): 2930 N Country Club Rd, Tucson AZ (Syncro primary address). NW / Northwest: 6650 N Oracle #100, Tucson AZ.
 - **Primary contact:** Mara Concordia (owner/operator); generic contact email `info@bestmassageintucson.com`; personal Microsoft account `mara.concordia@gmail.com` (OneDrive). Domain user: `mara`.
 - **Other key staff:** Bridgette (BridgetteSH); Christine Z (ChristineZ); Calista A (CalistaA); Leslie W (leslieW); Sarah M (SarahM); Katie B (katieb); Sharon S (SharonS); PSTAdmin.
 - **Contract type:** Break-fix / T&M (verify — recent invoices per-ticket ~$150–300/visit, plus a recurring ~$195.19/month line item; no retainer contract confirmed)
@@ -150,6 +153,10 @@ Client SOAP-note and business files reside on **PST-SERVER G:\Shares**. The @Cli
 - **Status 2026-07-01:** running normally (the 6/29 stop-for-restores self-resumed).
 - **Caveat:** `cbb list` is unreliable on comma/space folder paths (false zeros, timeouts on large trees). Use restore-to-staging + local diff for any deletion-scope investigation.
 
+### VSS Shadow Copies (PST-SERVER G:)
+
+Local point-in-time recovery / self-service "Previous Versions" on the data volume, deployed as the near-line complement to the B2 backup (confirmed 2026-07-02). Volume Shadow Copies enabled on **G:** with a **69.8 GB** storage cap and roughly **4 snapshots/day** (observed schedule ~6a / 12p / 1p / 6p). Provides fast in-place rollback of individual files/folders without a B2 restore, and is the "Option 2" alternative to the (NTFS-impossible) recycle-bin design Mara requested. Note: after the 2026-06-13 trim, older snapshots were pruned — earliest snapshot ranges have been observed as recent as 6/25–6/28, so VSS is a short-window safety net, not long-term retention (that role is B2 / MSP360). The Security event log backing the deletion audit is sized to **128 MB max** on PST-SERVER.
+
 ### NTFS Access Control (G:\Shares\Scanned)
 
 ACL root is `G:\Shares\Scanned`; permissions inherit to `@Clients` and subdirectories. Hardened 2026-07-01. ACL backup on server: `C:\PST-Recovery\acl-backup-scanned-20260701-072725.txt`.