The nightly forget now runs against lolk, which subsumes the one-time prune the old cutover comment promised. Dual-write continues with the direction reversed: backups land on lolk and the mirror phase copies back to mountain-of-faith.

Assisted-by: GLM-5.3 via pi

diff --git a/lotus-land-story/backup.yml b/lotus-land-story/backup.yml
index ba9a728..d8a2338 100644
--- a/lotus-land-story/backup.yml
+++ b/lotus-land-story/backup.yml
@@ -1,8 +1,8 @@
 - name: Backup
   hosts: lotus-land-story
   vars:
-    primary_repository: sftp:restic@mountain-of-faith:/mnt/mountain-of-faith/restic
-    secondary_repository: sftp:restic@legacy-of-lunatic-kingdom:/mnt/data/restic
+    primary_repository: sftp:restic@legacy-of-lunatic-kingdom:/mnt/data/restic
+    secondary_repository: sftp:restic@mountain-of-faith:/mnt/mountain-of-faith/restic
   tasks:
 
     - name: Install Restic
diff --git a/lotus-land-story/templates/backup.sh b/lotus-land-story/templates/backup.sh
index 82c1e0b..2efec89 100644
--- a/lotus-land-story/templates/backup.sh
+++ b/lotus-land-story/templates/backup.sh
@@ -119,13 +119,10 @@ phase forget restic --verbose forget \
   --keep-within-monthly 100y \
   --prune
 
-# Mirror onto the NAS repo while both are dual-write targets. Restic resolves
-# the source repository's password separately from RESTIC_PASSWORD, so pass
-# it explicitly; the repos share one.
+# Mirror onto mountain-of-faith while both are dual-write targets. Restic
+# resolves the source repository's password separately from RESTIC_PASSWORD, so
+# pass it explicitly; the repos share one.
 export RESTIC_REPOSITORY=${SECONDARY_REPOSITORY}
 export RESTIC_FROM_PASSWORD=${RESTIC_PASSWORD}
 phase unlock-secondary restic unlock
 phase mirror restic --verbose copy --from-repo "${PRIMARY_REPOSITORY}"
-
-# Snapshots forgotten above are never removed from the secondary; a one-time
-# forget --prune against it happens at the cutover.