bin/backup archives the gitignored host-local set (git ls-files --ignored, so it can't drift from .gitignore) into a chmod-600 tar.gz outside the repo (~/ogma-backups), with retention. Runnable on demand, via the bot (new whitelisted `ogmactl backup`), or nightly through ogma-backup.timer (installed by bin/setup). bin/uninstall backs up first, removes the systemd --user units and copied skills, then deletes the repo itself by exec'ing rm (no npx needed). System units get a printed sudo command; the Claude memory dir and backups are never touched. Guards refuse $HOME, /, and non-Ogma dirs. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K9qo9rpEaAyrzAV1XXVjDZ