doc

docs/RESCUE_EDITION_PLAN.md

···
+# The Healer's Touch: AethelOS Rescue Edition
+
+**Subtitle:** *When Systems Fall, The Healer Arrives*
+**Status:** Planned
+**Priority:** Very High (Real-world use case)
+**Dependencies:** VFS layer, World-Tree storage, Eldarin shell
+**Estimated Timeline:** 8-12 weeks
+**Target Release:** v0.3.0 "The Healer"
+**Last Updated:** January 2025
+
+---
+
+## Table of Contents
+
+1. [The Vision](#the-vision)
+2. [Why This Changes Everything](#why-this-changes-everything)
+3. [Target Audiences](#target-audiences)
+4. [Core Features](#core-features)
+5. [User Scenarios](#user-scenarios)
+6. [Eldarin Rescue Commands](#eldarin-rescue-commands)
+7. [Bootable USB Creation](#bootable-usb-creation)
+8. [Implementation Roadmap](#implementation-roadmap)
+9. [Technical Architecture](#technical-architecture)
+10. [Competitive Analysis](#competitive-analysis)
+11. [Marketing Strategy](#marketing-strategy)
+12. [Success Metrics](#success-metrics)
+
+---
+
+## The Vision
+
+> *"When hard drives crash and bootloaders break, when files vanish and systems fail, the Healer arrives on a silver disc—not with arcane commands and cryptic syntax, but with beauty, intelligence, and grace."*
+
+### The Problem
+
+**Every day, millions of people lose data:**
+- Crashed operating systems that won't boot
+- Accidentally deleted files
+- Corrupted filesystems
+- Broken bootloaders
+- Ransomware attacks
+- Hardware failures
+
+**Existing rescue tools are:**
+- ❌ Ugly (1990s command-line interfaces)
+- ❌ Arcane (complex, expert-only commands)
+- ❌ Fragmented (need different tools for each task)
+- ❌ Slow (brute-force file searching)
+- ❌ Unsafe (C code that crashes during critical operations)
+
+### The AethelOS Solution
+
+**A bootable USB that:**
+- ✅ **Boots on any x86-64 PC** (no installation required)
+- ✅ **Reads any filesystem** (FAT32, ext4, NTFS, APFS*)
+- ✅ **Beautiful interface** (Eldarin shell, not cryptic commands)
+- ✅ **Intelligent search** (World-Tree queries, not grep)
+- ✅ **Automatic versioning** (undo accidental changes)
+- ✅ **Safe** (Rust - won't crash during recovery)
+- ✅ **Fast** (boots in seconds, operates in real-time)
+
+### The Killer Insight
+
+**AethelOS isn't just an experimental OS anymore.**
+
+**It's the rescue disc everyone wishes existed.**
+
+People will:
+1. **Use it for rescue operations** (immediate value)
+2. **Fall in love with the interface** (beautiful, intuitive)
+3. **Realize they want this as their daily OS** (adoption path!)
+
+**This is how you bootstrap an OS:**
+- Not: "Abandon your OS for mine" (too risky)
+- But: "Use this to save your current OS" (safe, valuable)
+- Then: "Why not use this all the time?" (natural progression)
+
+---
+
+## Why This Changes Everything
+
+### 1. Real-World Use Case (Today)
+
+**Not:** "Cool experimental OS, maybe useful someday"
+**But:** "Essential tool I need RIGHT NOW"
+
+Every IT professional needs a rescue disc. AethelOS can be THE rescue disc.
+
+### 2. Immediate Value Proposition
+
+**SystemRescue users:** ~500,000 downloads/year
+**GParted Live users:** ~1,000,000 downloads/year
+**Hiren's Boot CD users:** ~2,000,000+ downloads/year (outdated, but still used!)
+
+**Market size:** Millions of potential users who NEED this tool.
+
+### 3. Gateway to Adoption
+
+```
+User journey:
+1. "My Windows crashed, need rescue disc"
+2. Downloads AethelOS Rescue USB
+3. "Wow, this interface is beautiful!"
+4. Saves their files with ease
+5. "This is so much better than Windows/Linux..."
+6. Tries AethelOS as daily OS
+7. Converted!
+```
+
+**This is how Firefox beat IE:** Make a better browser, people switch.
+**This is how Chrome beat Firefox:** Make it faster, people switch.
+**This is how you beat Windows/Linux:** Make rescue operations beautiful, then show them the OS.
+
+### 4. Differentiation
+
+**Every other OS:**
+- Tries to be better at what Windows/Linux already do
+- Hard to convince people to switch
+- Chicken-and-egg problem (no apps because no users)
+
+**AethelOS Rescue:**
+- Does something Windows/Linux CAN'T do well
+- People use it ALONGSIDE their current OS (no switching required!)
+- Builds user base BEFORE asking them to switch
+
+---
+
+## Target Audiences
+
+### Primary Audiences (Launch)
+
+#### 1. IT Professionals & Sysadmins
+**Size:** ~20 million worldwide
+**Pain points:**
+- Need reliable rescue tools
+- Tired of ugly SystemRescue/GParted interfaces
+- Want better file search capabilities
+- Need cross-platform support
+
+**Why AethelOS:**
+- Professional-grade tools with beautiful UX
+- World-Tree queries find files faster
+- Works on Windows, Linux, and Mac systems
+- Rust safety = no crashes during critical operations
+
+**Willingness to pay:** High (companies budget for tools)
+
+---
+
+#### 2. Data Recovery Services
+**Size:** $10B+ industry
+**Pain points:**
+- Need advanced file discovery tools
+- Timeline reconstruction is manual/difficult
+- Metadata-based search is limited
+- Multiple tools needed for different filesystems
+
+**Why AethelOS:**
+- World-Tree indexes metadata automatically
+- Temporal queries (find files by date/time)
+- Content-based search (find files even if renamed)
+- Unified interface for all filesystems
+
+**Willingness to pay:** Very high (charge clients $500-5000 per recovery)
+
+---
+
+#### 3. Digital Forensics Experts
+**Size:** $5B+ industry
+**Pain points:**
+- Timeline reconstruction is tedious
+- Need non-destructive investigation tools
+- Cross-filesystem analysis is complex
+- Tool chains are fragmented
+
+**Why AethelOS:**
+- Automatic version history tracking
+- Read-only mounts by default
+- Cross-filesystem queries
+- Beautiful reporting interface
+
+**Willingness to pay:** Very high (government/enterprise budgets)
+
+---
+
+#### 4. Power Users / Enthusiasts
+**Size:** ~50 million worldwide
+**Pain points:**
+- Existing rescue discs are ugly/hard to use
+- Want better file recovery tools
+- Interested in new technology
+- Appreciate good design
+
+**Why AethelOS:**
+- Actually fun to use
+- Feels like magic (intelligent queries)
+- Open source (can customize)
+- Cool factor (Rust, innovative design)
+
+**Willingness to pay:** Medium (enthusiast budgets)
+
+---
+
+### Secondary Audiences (Later)
+
+#### 5. Computer Repair Shops
+**Size:** ~100,000 shops in US alone
+**Pain points:**
+- Need reliable tools for customer repairs
+- Want fast, efficient workflows
+- Customers expect professionalism
+- Need to fix Windows, Linux, and Mac
+
+**Why AethelOS:**
+- Professional appearance (impress customers)
+- Fast operations (save time = more customers)
+- Universal (one tool for everything)
+- Reliable (Rust safety)
+
+---
+
+#### 6. Educational Institutions
+**Size:** Universities, community colleges, coding bootcamps
+**Pain points:**
+- Teach system administration
+- Need good examples of OS design
+- Students need practical tools
+- Want modern, well-designed software
+
+**Why AethelOS:**
+- Great teaching tool (clean Rust code)
+- Students actually want to use it
+- Demonstrates modern OS concepts
+- Open source (free for education)
+
+---
+
+## Core Features
+
+### 1. Universal Filesystem Support
+
+**Read support (v0.3.0):**
+- ✅ FAT32 (USB drives, SD cards, old Windows)
+- ✅ ext4 (Linux systems, most servers)
+- ✅ NTFS (Windows 7/8/10/11)
+- ✅ ext2/ext3 (older Linux systems)
+
+**Write support (v0.3.0):**
+- ✅ FAT32 (universal compatibility)
+- ✅ ext4 (Linux systems)
+- ⚠️ NTFS (read-only initially, write in v0.4.0)
+
+**Future support (v0.4.0+):**
+- ⏳ APFS (macOS)
+- ⏳ exFAT (large file USB drives)
+- ⏳ Btrfs (Linux advanced filesystems)
+- ⏳ ZFS (servers, NAS)
+
+---
+
+### 2. Intelligent File Discovery (World-Tree Queries)
+
+**Traditional tools:**
+```bash
+# Slow, path-based, no intelligence
+$ find / -name "*.docx" -mtime -7 -size +100k
+```
+
+**AethelOS:**
+```bash
+# Fast, metadata-indexed, intelligent
+> seek documents from last-week larger-than 100KB
+```
+
+**Query capabilities:**
+
+**By metadata:**
+```bash
+> seek photos where camera="Canon EOS 5D"
+> seek documents where author="John Smith"
+> seek videos where duration > 10-minutes
+> seek files where created between "2024-01-01" and "2024-01-31"
+```
+
+**By content:**
+```bash
+> seek files where contains "project proposal"
+> seek code where language="rust" and contains "unsafe"
+> seek documents where contains "budget 2024"
+```
+
+**By essence (file type):**
+```bash
+> seek scrolls         # Text documents
+> seek tomes           # Executables
+> seek tapestries      # Images
+> seek chronicles      # Videos
+> seek runes           # Configuration files
+```
+
+**Cross-filesystem:**
+```bash
+> seek all-my-photos from-all-drives
+Scanning: C:\ (NTFS), /dev/sda2 (ext4), /Volumes/Data (APFS)
+Found: 15,847 photos across 3 filesystems
+```
+
+---
+
+### 3. Automatic Version History
+
+**Every file accessed gets versioned automatically:**
+
+```bash
+> show-versions /etc/fstab
+v1: 2024-01-01 10:00 (512 bytes) - Original
+v2: 2024-01-15 14:30 (548 bytes) - Added new mount
+v3: 2024-01-20 09:15 (423 bytes) - Broken! ← current
+
+> restore /etc/fstab to v2
+✓ Restored working version
+
+> diff v2 v3
+- UUID=xxx-xxx-xxx /mnt/data ext4 defaults 0 0
++ UUID=xxx-xxx-xxx /mnt/dta ext4 defaults 0 0  # Typo!
+```
+
+**Use cases:**
+- Undo accidental edits
+- Recover deleted files
+- See what changed when system broke
+- Timeline reconstruction for forensics
+
+---
+
+### 4. Beautiful Eldarin Shell
+
+**Not this:**
+```bash
+# Cryptic, expert-only
+$ mount -t ext4 /dev/sda1 /mnt/recovery
+$ fsck.ext4 -y /dev/sda1
+$ find /mnt/recovery -name "*.docx" -mtime -7
+$ cp -r /mnt/recovery/home/user/Documents /media/backup/
+```
+
+**But this:**
+```bash
+# Intuitive, beautiful
+> mount /dev/sda1 linux ext4
+> heal /dev/sda1
+> seek documents from last-week at linux
+> backup linux:/home/user/Documents to /rescue-drive/
+```
+
+**Features:**
+- ✅ Plain language commands
+- ✅ Helpful error messages
+- ✅ Tab completion
+- ✅ Command history (up/down arrows)
+- ✅ Progress indicators with visual progress bars
+- ✅ Color-coded output
+- ✅ Built-in help (`help mount`, `help seek`)
+
+---
+
+### 5. Safe Operations (Rust)
+
+**C-based rescue tools:**
+- ❌ Segfaults during critical operations
+- ❌ Memory corruption can cause data loss
+- ❌ Buffer overflows are common
+- ❌ No memory safety guarantees
+
+**AethelOS (Rust):**
+- ✅ No segfaults (memory safety guaranteed)
+- ✅ No undefined behavior
+- ✅ Panic = controlled failure (not random corruption)
+- ✅ Thread-safe operations
+- ✅ Zero-cost abstractions
+
+**This matters during data recovery:**
+```
+Bad: Tool crashes → partial copy → corrupted data → data loss
+Good: Safe operation → complete copy → verified data → success
+```
+
+---
+
+### 6. Fast Boot & Operation
+
+**Design goals:**
+- Boot in <10 seconds (minimal kernel)
+- Filesystem mount in <2 seconds
+- Queries return results in <1 second (indexed)
+- File operations at native speed
+
+**Optimizations:**
+- Minimal kernel (no unnecessary drivers)
+- VFS layer is zero-cost abstraction
+- World-Tree uses efficient indexing
+- Rust compiles to fast native code
+
+---
+
+### 7. Multi-Boot Coexistence
+
+**Install alongside existing OS:**
+
+```
+Disk layout:
+/dev/sda1 - Windows (NTFS)          → Keep existing Windows
+/dev/sda2 - Linux (ext4)            → Keep existing Linux
+/dev/sda3 - AethelOS Rescue (1GB)   → Add small rescue partition
+```
+
+**Or run from USB:**
+```
+USB stick:
+- Boot AethelOS from USB
+- No installation required
+- Works on any PC
+- Doesn't touch existing system
+```
+
+---
+
+## User Scenarios
+
+### Scenario 1: Crashed Windows System
+
+**User:** Sarah, graphic designer
+**Problem:** Windows 10 won't boot after update
+**Needs:** Recover project files before reinstalling
+
+**With traditional tools:**
+```bash
+# Boot SystemRescue USB
+# Wait 2 minutes for boot
+# Type cryptic commands:
+$ lsblk  # Figure out which partition is Windows
+$ mkdir /mnt/windows
+$ mount -t ntfs /dev/sda2 /mnt/windows
+$ cd /mnt/windows/Users/Sarah/Documents
+$ ls -la  # Manually browse directories
+$ find . -name "*.psd" -mtime -30  # Find Photoshop files
+$ cp -r Projects /media/backup/  # Copy to external drive
+# 30+ minutes, multiple errors, frustration
+```
+
+**With AethelOS:**
+```bash
+# Boot AethelOS USB (5 seconds)
+> scan-disks
+Found Windows partition at /dev/sda2 (NTFS)
+
+> mount /dev/sda2 windows ntfs
+✓ Mounted as /windows
+
+> seek files where creator="Sarah"
+           and modified > 30-days-ago
+           and essence != "Cache"
+Analyzing... Found 1,247 files (15.2 GB)
+
+> preview results
+Projects/ClientA/banner.psd (50 MB)
+Projects/ClientB/logo.ai (12 MB)
+Documents/Invoices/*.xlsx (147 files)
+...
+
+> backup results to /rescue-drive/sarah-backup/
+[████████████████████████░░] 95% (14.5 GB / 15.2 GB)
+✓ Backup complete!
+
+> create-manifest /rescue-drive/manifest.txt
+✓ Created detailed file list
+
+# Total time: 5 minutes, zero errors, happy user
+```
+
+**Result:** Sarah recovers all files quickly, understands what happened, recommends AethelOS to colleagues.
+
+---
+
+### Scenario 2: Broken Linux Bootloader
+
+**User:** Mike, software developer
+**Problem:** GRUB broken after dual-boot Windows update
+**Needs:** Fix bootloader, preserve both OS installations
+
+**With traditional tools:**
+```bash
+# Boot rescue disc
+# Mount root partition
+$ mount /dev/sda3 /mnt
+# Mount boot partition
+$ mount /dev/sda1 /mnt/boot
+# Chroot into system
+$ chroot /mnt
+# Reinstall GRUB
+$ grub-install /dev/sda
+$ update-grub
+# Cross fingers, reboot
+# Often fails, requires forum searching
+```
+
+**With AethelOS:**
+```bash
+> scan-disks
+Found:
+  /dev/sda1 - EFI (FAT32)
+  /dev/sda2 - Windows (NTFS)
+  /dev/sda3 - Linux (ext4)
+
+> mount all auto
+✓ Mounted 3 partitions
+
+> diagnose boot-issues
+⚠ GRUB configuration corrupted
+⚠ EFI boot entries missing
+  Possible causes:
+    - Windows update overwrote bootloader
+    - Power loss during update
+
+> show-versions /boot/grub/grub.cfg
+v1: 2024-01-01 (working)
+v2: 2024-01-20 (corrupted) ← current
+
+> restore /boot/grub/grub.cfg to v1
+✓ Restored working configuration
+
+> fix-boot auto
+Analyzing boot environment...
+  ✓ Detected Windows Boot Manager
+  ✓ Detected GRUB
+Creating boot menu...
+  ✓ Added Windows 10
+  ✓ Added Ubuntu 22.04
+  ✓ Added AethelOS Rescue
+Updated EFI boot order
+✓ Boot repaired!
+
+> verify-boot
+✓ GRUB configuration valid
+✓ EFI entries correct
+✓ Both operating systems bootable
+
+Ready to reboot.
+```
+
+**Result:** Mike's system boots correctly, both Windows and Linux work. He's impressed and installs AethelOS as third OS.
+
+---
+
+### Scenario 3: Accidental File Deletion
+
+**User:** Emma, small business owner
+**Problem:** Deleted entire client folder, needs it back NOW
+**Needs:** Recover deleted files ASAP
+
+**With traditional tools:**
+```bash
+# Install PhotoRec
+$ sudo apt-get install testdisk
+$ photorec /dev/sda
+# Scans entire disk (takes hours)
+# Recovers 50,000+ files with random names
+# Must manually sort through garbage
+# f0001234.jpg, f0001235.doc, f0001236.tmp, ...
+# No folder structure, no filenames
+# Days of work to find the right files
+```
+
+**With AethelOS:**
+```bash
+> mount /dev/sda1 work ext4
+
+# World-Tree tracks deletions!
+> seek files where path contains "ClientX"
+              and deleted-within "1 hour"
+
+Found deleted folder: /home/emma/Clients/ClientX/
+  Deleted: 23 minutes ago
+  Contains: 147 files (2.3 GB)
+
+Contents preview:
+  Proposal_Final.docx
+  Budget_2024.xlsx
+  Meeting_Notes/*.txt
+  Designs/*.ai
+
+> restore /home/emma/Clients/ClientX/ recursive
+Restoring 147 files...
+[████████████████████████████] 100%
+✓ Folder restored with original structure!
+
+> verify restoration
+✓ All files present
+✓ Folder structure intact
+✓ File dates preserved
+✓ No corruption detected
+
+# Total time: 2 minutes
+```
+
+**Result:** Emma recovers everything instantly, tells everyone about the "magic recovery tool."
+
+---
+
+### Scenario 4: Forensic Investigation
+
+**User:** Detective Rodriguez, cybercrime unit
+**Problem:** Investigate compromised corporate server
+**Needs:** Timeline of file modifications, find evidence
+
+**With traditional tools:**
+```bash
+# Mount image read-only
+$ mount -o ro /evidence/server.img /mnt/evidence
+# Manual timeline reconstruction
+$ find /mnt/evidence -type f -newermt "2024-01-15" ! -newermt "2024-01-16"
+# Thousands of results, no context
+# Export to spreadsheet, manual analysis
+# Days of work
+```
+
+**With AethelOS:**
+```bash
+> mount /evidence/server.img evidence ext4 read-only
+✓ Mounted in read-only mode (forensically sound)
+
+> show-timeline evidence:/ from "2024-01-15" to "2024-01-16"
+
+Timeline of modifications during suspected attack window:
+
[phone]:32:15 - /var/www/upload/shell.php (NEW, 2.4 KB)
[phone]:32:47 - /etc/passwd (MODIFIED, +1 line)
[phone]:33:12 - /home/attacker/.ssh/authorized_keys (NEW)
[phone]:35:00 - /var/log/apache2/access.log (MODIFIED)
[phone]:40:23 - /root/.bash_history (MODIFIED)
+...
+
+> seek files where essence="Executable"
+           and created during "attack-window"
+           and creator="Unknown"
+
+Found 3 suspicious executables:
+  /tmp/.hidden/rootkit (5.2 MB)
+  /var/www/upload/backdoor.elf (128 KB)
+  /usr/local/bin/logger (modified from original)
+
+> analyze-file /tmp/.hidden/rootkit
+File: /tmp/.hidden/rootkit
+Type: ELF 64-bit executable
+Hash: a3f5... (MATCHES known malware DB)
+Strings: Contains "reverse_shell", "keylogger"
+Network: Opens connection to 192.168.1.100:4444
+⚠ CONFIRMED MALWARE
+
+> export-evidence to /case-files/case-2024-001/
+Exporting:
+  ✓ Timeline (JSON, CSV, PDF)
+  ✓ Suspicious files (with hashes)
+  ✓ Modified system files (with diffs)
+  ✓ Network activity logs
+  ✓ Chain of custody log
+✓ Evidence package created
+
+# Generates courtroom-ready report
+```
+
+**Result:** Investigation completed in hours instead of days. Evidence is clear and well-documented.
+
+---
+
+### Scenario 5: Cross-Platform Data Migration
+
+**User:** Alex, switching from Windows to Linux
+**Problem:** Needs to migrate files from Windows partition to new Linux install
+**Needs:** Smart selection (skip junk), preserve metadata
+
+**With traditional tools:**
+```bash
+# Mount both partitions
+$ mount /dev/sda1 /mnt/windows
+$ mount /dev/sda2 /mnt/linux
+# Manually copy directories
+$ cp -r /mnt/windows/Users/Alex/Documents /mnt/linux/home/alex/
+# Copies everything including cache, temp files, etc.
+# Wastes space and time
+```
+
+**With AethelOS:**
+```bash
+> mount /dev/sda1 windows ntfs
+> mount /dev/sda2 linux ext4
+
+> seek files from windows
+           where path contains "Users/Alex"
+           and essence != "Cache"
+           and essence != "Temp"
+           and essence != "System"
+           and size > 0
+
+Analyzing Windows partition...
+Found 12,847 files (45 GB of real data)
+Skipping 180 GB of Windows system files and junk
+
+Categories:
+  Documents:  3,241 files (2.1 GB)
+  Photos:     5,123 files (38 GB)
+  Music:      2,847 files (3.5 GB)
+  Videos:       523 files (1.2 GB)
+  Other:      1,113 files (0.2 GB)
+
+> smart-migrate windows:/Users/Alex to linux:/home/alex
+Migration plan:
+  Documents → /home/alex/Documents
+  Photos → /home/alex/Pictures
+  Music → /home/alex/Music
+  Videos → /home/alex/Videos
+
+Proceed? (yes/no) > yes
+
+[████████████████████████░░] 95% (42.8 GB / 45 GB)
+✓ Migration complete!
+
+> verify-migration
+✓ All files copied successfully
+✓ File integrity verified (checksums match)
+✓ Metadata preserved where possible
+✓ Folder structure created correctly
+
+Summary:
+  Copied: 12,847 files (45 GB)
+  Skipped: 53,128 junk files (180 GB)
+  Time saved: 2 hours
+  Space saved: 180 GB
+```
+
+**Result:** Alex has a clean Linux installation with only the files that matter. Impressed by intelligence.
+
+---
+
+## Eldarin Rescue Commands
+
+### Filesystem Operations
+
+#### `scan-disks` - Detect all storage devices
+```bash
+> scan-disks
+
+Detected storage devices:
+
+/dev/sda (1TB Samsung SSD)
+├─ sda1: EFI System (FAT32, 512 MB)
+├─ sda2: Windows (NTFS, 250 GB)
+├─ sda3: Linux (ext4, 100 GB)
+└─ sda4: Data (NTFS, 649 GB)
+
+/dev/sdb (2TB External Drive)
+└─ sdb1: Backup (ext4, 2TB)
+
+/dev/sdc (16GB USB Drive)
+└─ sdc1: AethelOS Rescue (FAT32, 16GB) ← booted from this
+```
+
+---
+
+#### `mount` - Mount a filesystem
+```bash
+# Auto-detect filesystem type
+> mount /dev/sda2 windows auto
+Detected: NTFS
+✓ Mounted as /windows
+
+# Specify filesystem type
+> mount /dev/sda3 linux ext4
+
+# Read-only mode (forensics)
+> mount /dev/sda2 evidence ntfs read-only
+
+# Mount all detected partitions
+> mount all auto
+✓ Mounted 5 partitions
+```
+
+---
+
+#### `unmount` - Safely unmount filesystem
+```bash
+> unmount windows
+Flushing pending writes...
+✓ Safe to remove
+
+> unmount all
+✓ All filesystems unmounted safely
+```
+
+---
+
+#### `heal` - Check and repair filesystem
+```bash
+> heal /dev/sda3
+
+◈ Checking ext4 filesystem...
+  ✓ Superblock valid
+  ✓ Inode table intact
+  ⚠ Found 3 orphaned inodes
+  ⚠ Found 1 bad block
+
+◈ Repairing...
+  ✓ Cleared orphaned inodes
+  ✓ Marked bad block unusable
+  ✓ Filesystem repaired
+
+> heal /dev/sda2 auto-fix
+Checking NTFS...
+⚠ Found 15 file system errors
+Auto-fixing enabled
+  ✓ All errors corrected
+```
+
+---
+
+### File Discovery & Search
+
+#### `seek` - Intelligent file search
+```bash
+# Basic search
+> seek documents
+
+# By time
+> seek files modified today
+> seek files created last-week
+> seek files from between "2024-01-01" and "2024-01-31"
+
+# By metadata
+> seek photos where camera="Canon EOS"
+> seek documents where author="John Smith"
+> seek videos where duration > 1-hour
+
+# By content
+> seek files where contains "confidential"
+> seek code where language="rust"
+
+# By essence (file type)
+> seek scrolls        # Documents
+> seek tapestries     # Images
+> seek chronicles     # Videos
+> seek tomes          # Executables
+
+# Complex queries
+> seek photos from last-month
+           where camera contains "Canon"
+           and size > 5MB
+           and not-in "/Windows/System32"
+
+# Cross-filesystem
+> seek all-my-photos from-all-drives
+> seek documents from windows, linux
+```
+
+---
+
+#### `show-versions` - View file history
+```bash
+> show-versions /etc/fstab
+
+Version history for /etc/fstab:
+  v1: 2024-01-01 10:00 (512 bytes) - Original
+  v2: 2024-01-15 14:30 (548 bytes) - Added mount point
+  v3: 2024-01-20 09:15 (423 bytes) - Broken ← current
+
+> show-versions /home/user/document.docx all
+
+Complete version history:
+  v1: 2024-01-10 09:00 - First draft
+  v2: 2024-01-10 14:30 - Added introduction
+  v3: 2024-01-11 10:15 - Revised section 2
+  ...
+  v23: 2024-01-20 16:45 - Final version ← current
+```
+
+---
+
+#### `restore` - Restore previous version
+```bash
+# Restore to specific version
+> restore /etc/fstab to v2
+✓ Restored to version 2 (2024-01-15)
+
+# Restore deleted file
+> restore /home/user/deleted.txt
+Found in version history (deleted 30 minutes ago)
+✓ File restored
+
+# Restore entire folder
+> restore /home/user/Projects/ recursive to yesterday
+Restoring 147 files to state from 2024-01-24 18:00...
+✓ Folder restored
+```
+
+---
+
+#### `diff` - Compare file versions
+```bash
+> diff /etc/fstab v1 v3
+
+--- Version 1 (2024-01-01)
++++ Version 3 (2024-01-20)
+
+- UUID=xxx-xxx /mnt/data ext4 defaults 0 0
++ UUID=xxx-xxx /mnt/dta ext4 defaults 0 0  # Typo!
++ UUID=yyy-yyy /mnt/backup ntfs defaults 0 0
+```
+
+---
+
+### Data Recovery & Backup
+
+#### `recover` - Advanced data recovery
+```bash
+# Recover recently deleted files
+> recover from windows deleted-within 24-hours
+
+Scanning for deleted files...
+Found 47 deleted files:
+  Documents/Report.docx (deleted 2 hours ago)
+  Downloads/installer.exe (deleted 5 hours ago)
+  ...
+
+Select files to recover: (all / select / filter)
+> all
+
+✓ Recovered 47 files to /recovered/
+
+# Deep scan for lost partitions
+> recover deep-scan /dev/sda
+
+Scanning entire disk...
+Found:
+  - Lost ext4 partition (50 GB, deleted 3 days ago)
+  - Orphaned files (2,847 files, 15 GB)
+
+Recover? (yes/no) > yes
+```
+
+---
+
+#### `backup` - Smart backup
+```bash
+# Simple backup
+> backup windows:/Users/Alex to /rescue-drive/backup/
+
+# Smart backup (skip junk)
+> smart-backup windows to /rescue-drive/
+Analyzing...
+  Found 12,847 important files (45 GB)
+  Will skip 53,128 junk files (180 GB)
+Proceed? > yes
+
+# Incremental backup
+> backup windows:/Users/Alex to /rescue-drive/backup/ incremental
+Only backing up changed files since last backup...
+  Changed: 23 files (150 MB)
+  New: 5 files (20 MB)
+✓ Incremental backup complete (170 MB)
+
+# Verify backup
+> verify-backup /rescue-drive/backup/
+Checking file integrity...
+  ✓ All files verified (checksums match)
+  ✓ No corruption detected
+```
+
+---
+
+#### `clone` - Disk cloning
+```bash
+# Clone entire disk
+> clone /dev/sda to /dev/sdb
+⚠ This will erase /dev/sdb. Continue? > yes
+Cloning 1TB disk...
+[████████████████████░░░░] 85% (850 GB / 1 TB)
+Estimated time: 15 minutes
+
+# Smart clone (skip empty space)
+> clone /dev/sda to /dev/sdb smart
+Only cloning used space (450 GB / 1 TB)
+[████████████████████████] 100%
+✓ Clone complete (2x faster!)
+
+# Verify clone
+> verify-clone /dev/sda /dev/sdb
+✓ Disks are identical
+```
+
+---
+
+### Boot Repair
+
+#### `diagnose` - Diagnose boot issues
+```bash
+> diagnose boot-issues
+
+Analyzing boot configuration...
+
+Issues found:
+  ⚠ GRUB configuration corrupted
+  ⚠ EFI boot entries missing
+  ⚠ Windows boot manager damaged
+
+Possible causes:
+  - Windows update overwrote bootloader
+  - Power loss during system update
+  - Disk corruption
+
+Recommendations:
+  1. Restore GRUB configuration from backup
+  2. Rebuild EFI boot entries
+  3. Repair Windows boot files
+```
+
+---
+
+#### `fix-boot` - Repair bootloader
+```bash
+# Automatic repair
+> fix-boot auto
+
+Detecting operating systems...
+  ✓ Found Windows 10 at /dev/sda2
+  ✓ Found Ubuntu 22.04 at /dev/sda3
+  ✓ Found AethelOS Rescue at /dev/sdc1
+
+Repairing bootloader...
+  ✓ Reinstalled GRUB
+  ✓ Generated configuration
+  ✓ Updated EFI entries
+  ✓ Set correct boot order
+
+Boot menu will show:
+  1. Ubuntu 22.04
+  2. Windows 10
+  3. AethelOS Rescue (USB)
+
+# Manual repair
+> fix-boot grub /dev/sda
+> fix-boot windows /dev/sda2
+> fix-boot efi
+```
+
+---
+
+#### `verify-boot` - Verify boot configuration
+```bash
+> verify-boot
+
+Checking boot configuration...
+  ✓ GRUB installed correctly
+  ✓ Configuration syntax valid
+  ✓ All kernels found
+  ✓ All operating systems bootable
+  ✓ EFI entries correct
+  ✓ Boot order optimal
+
+System is ready to boot.
+```
+
+---
+
+### System Analysis
+
+#### `show-timeline` - File modification timeline
+```bash
+> show-timeline windows:/ from "2024-01-20" to "2024-01-21"
+
[phone]:32:15 - C:\upload\shell.php (NEW)
[phone]:32:47 - C:\Windows\System32\config\SAM (MODIFIED)
[phone]:35:00 - C:\Windows\Logs\security.log (MODIFIED)
+...
+
+# Filter by path
+> show-timeline /etc from yesterday
+
+# Filter by type
+> show-timeline / only executables from last-week
+
+# Export timeline
+> show-timeline / from "attack-window" export csv
+✓ Exported to timeline.csv
+```
+
+---
+
+#### `analyze-file` - Deep file analysis
+```bash
+> analyze-file /suspicious/file.exe
+
+File: /suspicious/file.exe
+Type: PE32+ executable (Windows 64-bit)
+Size: 2.4 MB
+Hash: a3f52b9... (MD5), 7d8e... (SHA-256)
+
+Signatures:
+  ⚠ Not signed
+  ⚠ No certificate
+
+Strings found:
+  "reverse_shell"
+  "keylogger"
+  "192.168.1.100:4444"
+
+Network activity:
+  Attempts connection to 192.168.1.100:4444
+
+Database check:
+  ⚠ HASH MATCHES KNOWN MALWARE
+
+Classification: MALWARE - High confidence
+```
+
+---
+
+#### `disk-health` - Check disk health
+```bash
+> disk-health /dev/sda
+
+Disk: Samsung SSD 1TB (/dev/sda)
+Model: Samsung 870 EVO
+Firmware: SVT02B6Q
+
+S.M.A.R.T. Status:
+  Overall: ✓ HEALTHY
+
+  Reallocated Sectors: 0 (✓ good)
+  Pending Sectors: 0 (✓ good)
+  Uncorrectable Errors: 0 (✓ good)
+  Temperature: 35°C (✓ normal)
+  Power-On Hours: 1,247
+
+  Wear Level: 5% (✓ excellent)
+  Estimated Life: 18.5 years
+
+Recommendation: Disk is healthy, no action needed.
+```
+
+---
+
+### Forensics & Investigation
+
+#### `export-evidence` - Create forensic evidence package
+```bash
+> export-evidence /case-files/case-2024-001/
+
+Creating evidence package...
+
+Including:
+  ✓ File timeline (JSON, CSV, PDF)
+  ✓ Suspicious files (with hashes)
+  ✓ System modifications (with diffs)
+  ✓ Network logs
+  ✓ Hash database matches
+  ✓ Chain of custody log
+
+Package created: case-2024-001.zip
+Hash: 7d8e9f... (SHA-256)
+
+This package is cryptographically signed and
+suitable for court presentation.
+```
+
+---
+
+#### `create-manifest` - Generate file inventory
+```bash
+> create-manifest /rescue-drive/manifest.txt
+
+Creating manifest...
+  Scanning 12,847 files...
+  Computing hashes...
+
+✓ Manifest created
+
+Contents:
+  Total files: 12,847
+  Total size: 45.2 GB
+  Hash algorithm: SHA-256
+  Created: 2024-01-25 14:30:00
+```
+
+---
+
+### Utility Commands
+
+#### `preview` - Preview search results
+```bash
+> seek documents from windows
+> preview results
+
+Results (showing 10 of 3,241):
+  1. C:\Users\Alex\Documents\Report.docx (2.4 MB)
+  2. C:\Users\Alex\Documents\Budget_2024.xlsx (543 KB)
+  3. C:\Users\Alex\Desktop\Notes.txt (15 KB)
+  ...
+
+Show more? (y/n) > y
+```
+
+---
+
+#### `help` - Context-sensitive help
+```bash
+> help mount
+
+MOUNT - Mount a filesystem
+
+Usage:
+  mount <device> <name> [filesystem] [options]
+
+Examples:
+  mount /dev/sda2 windows auto
+  mount /dev/sda3 linux ext4
+  mount /dev/sdb1 backup ntfs read-only
+
+Options:
+  auto        - Auto-detect filesystem type
+  read-only   - Mount in read-only mode (safe)
+  force       - Force mount even if errors
+
+See also: unmount, scan-disks, heal
+```
+
+---
+
+## Bootable USB Creation
+
+### Requirements
+
+**Hardware:**
+- USB drive (8GB minimum, 16GB recommended)
+- x86-64 PC with UEFI support
+
+**Software:**
+- AethelOS ISO image (download from aethelos.org/rescue)
+- USB writing tool:
+  - Windows: Rufus, Balena Etcher
+  - Linux: `dd`, GNOME Disks
+  - macOS: Balena Etcher, `dd`
+
+---
+
+### Creation Process (Windows)
+
+**Using Rufus (Recommended):**
+
+1. Download Rufus: https://rufus.ie
+2. Download AethelOS Rescue ISO
+3. Insert USB drive
+4. Open Rufus:
+   - Device: Select your USB drive
+   - Boot selection: "Disk or ISO image"
+   - Click "SELECT" and choose AethelOS ISO
+   - Partition scheme: "GPT"
+   - Target system: "UEFI"
+   - File system: "FAT32"
+   - Click "START"
+5. Wait for completion (~5 minutes)
+6. Safe to eject!
+
+---
+
+### Creation Process (Linux)
+
+**Using dd:**
+
+```bash
+# Find USB device
+$ lsblk
+# Look for your USB drive (e.g., /dev/sdb)
+
+# Write ISO to USB (⚠ CAREFUL - this erases USB!)
+$ sudo dd if=aethelos-rescue.iso of=/dev/sdb bs=4M status=progress
+$ sync
+
+# Done!
+```
+
+**Using GNOME Disks:**
+1. Open "Disks" application
+2. Select USB drive
+3. Click menu → "Restore Disk Image"
+4. Select AethelOS ISO
+5. Click "Start Restoring"
+
+---
+
+### Creation Process (macOS)
+
+**Using dd:**
+
+```bash
+# Find USB device
+$ diskutil list
+# Look for your USB drive (e.g., /dev/disk2)
+
+# Unmount (but don't eject)
+$ diskutil unmountDisk /dev/disk2
+
+# Write ISO to USB
+$ sudo dd if=aethelos-rescue.iso of=/dev/rdisk2 bs=4m
+# Note: rdisk2 (not disk2) is faster
+
+# Eject
+$ diskutil eject /dev/disk2
+```
+
+---
+
+### Booting from USB
+
+**1. Insert USB drive**
+
+**2. Enter BIOS/UEFI:**
+- Restart PC
+- Press key during boot:
+  - Common keys: F2, F12, Del, Esc
+  - Dell: F12
+  - HP: F9 or Esc
+  - Lenovo: F12 or F1
+  - ASUS: F2 or Del
+
+**3. Change boot order:**
+- Go to "Boot" menu
+- Move "USB Device" or "Removable Media" to first position
+- Save and exit (usually F10)
+
+**4. Boot into AethelOS:**
+- PC will restart
+- AethelOS logo appears
+- Boot menu (if multiple OS detected)
+- Select "AethelOS Rescue"
+- System boots to Eldarin shell
+
+**Total time:** 5-10 seconds
+
+---
+
+### Persistent Storage (Optional)
+
+**Create persistent partition:**
+
+```
+USB Layout:
+├─ Partition 1 (8GB): AethelOS Rescue (bootable)
+└─ Partition 2 (8GB): Persistent Data (stores recovered files)
+```
+
+**Setup:**
+```bash
+# After booting AethelOS from USB
+> partition-usb /dev/sdc persistent
+
+This will:
+  - Shrink boot partition to 8GB
+  - Create 8GB data partition
+  - Format as ext4
+  - Mount automatically
+
+Proceed? (yes/no) > yes
+
+✓ Persistent partition created at /persistent
+You can now save files that persist across reboots!
+```
+
+---
+
+## Implementation Roadmap
+
+### Phase 1: Foundation (Weeks 1-2)
+**Dependencies:** VFS layer complete, FAT32 support
+
+**Goals:**
+- ✅ Bootable USB creation
+- ✅ Basic rescue commands
+- ✅ Filesystem mounting
+- ✅ Simple file operations
+
+**Deliverables:**
+```
+heartwood/src/rescue/
+├── mod.rs              # Rescue mode initialization
+├── commands/           # Rescue-specific commands
+│   ├── mount.rs
+│   ├── scan_disks.rs
+│   ├── heal.rs
+│   └── backup.rs
+└── usb/                # USB boot support
+    └── persistence.rs
+```
+
+**Eldarin commands:**
+- `scan-disks` - Detect storage devices
+- `mount` / `unmount` - Filesystem operations
+- `heal` - Basic filesystem check
+- `backup` - Simple file copy
+
+**Success criteria:**
+- Can boot from USB
+- Can mount FAT32 and ext4
+- Can copy files between partitions
+- Basic commands work reliably
+
+---
+
+### Phase 2: World-Tree Integration (Weeks 3-4)
+**Dependencies:** World-Tree object store on VFS
+
+**Goals:**
+- ✅ Intelligent file search
+- ✅ Automatic versioning
+- ✅ Cross-filesystem queries
+
+**Deliverables:**
+```
+groves/world-tree_grove/src/rescue/
+├── indexing.rs         # Index existing filesystems
+├── queries.rs          # Rescue-specific queries
+└── versioning.rs       # Track file modifications
+```
+
+**Eldarin commands:**
+- `seek` - Intelligent file search
+- `show-versions` - View file history
+- `restore` - Restore previous versions
+- `diff` - Compare file versions
+
+**Success criteria:**
+- Can index NTFS/ext4 filesystems
+- Queries return results in <1 second
+- Version history works correctly
+- Can restore deleted files
+
+---
+
+### Phase 3: Advanced Recovery (Weeks 5-6)
+**Dependencies:** Phases 1-2 complete
+
+**Goals:**
+- ✅ Deep file recovery
+- ✅ Boot repair utilities
+- ✅ Disk cloning
+
+**Deliverables:**
+```
+heartwood/src/rescue/
+├── recovery/
+│   ├── deleted_files.rs    # Recover deleted files
+│   ├── deep_scan.rs        # Lost partition recovery
+│   └── corruption.rs       # Handle corrupted data
+├── boot/
+│   ├── grub.rs            # GRUB repair
+│   ├── efi.rs             # EFI repair
+│   └── windows.rs         # Windows boot repair
+└── clone.rs               # Disk cloning
+```
+
+**Eldarin commands:**
+- `recover` - Advanced recovery
+- `diagnose boot-issues`
+- `fix-boot` - Boot repair
+- `verify-boot`
+- `clone` - Disk cloning
+
+**Success criteria:**
+- Can recover recently deleted files
+- Can repair common boot issues
+- Can clone disks efficiently
+
+---
+
+### Phase 4: Forensics Tools (Weeks 7-8)
+**Dependencies:** Phases 1-3 complete
+
+**Goals:**
+- ✅ Timeline reconstruction
+- ✅ File analysis
+- ✅ Evidence export
+
+**Deliverables:**
+```
+heartwood/src/rescue/forensics/
+├── timeline.rs         # Modification timeline
+├── analysis.rs         # File analysis
+├── malware_db.rs       # Malware signature database
+└── evidence.rs         # Export evidence packages
+```
+
+**Eldarin commands:**
+- `show-timeline` - Visual timeline
+- `analyze-file` - Deep file analysis
+- `export-evidence` - Forensic packages
+- `disk-health` - S.M.A.R.T. monitoring
+
+**Success criteria:**
+- Timeline shows all modifications
+- File analysis detects malware
+- Evidence packages are court-ready
+
+---
+
+### Phase 5: Polish & Documentation (Weeks 9-10)
+**Dependencies:** Phases 1-4 complete
+
+**Goals:**
+- ✅ Performance optimization
+- ✅ Comprehensive documentation
+- ✅ Video tutorials
+- ✅ Example scenarios
+
+**Deliverables:**
+```
+docs/rescue/
+├── GETTING_STARTED.md
+├── COMMAND_REFERENCE.md
+├── SCENARIOS.md
+├── VIDEO_TUTORIALS/
+│   ├── 01_creating_usb.mp4
+│   ├── 02_basic_recovery.mp4
+│   ├── 03_boot_repair.mp4
+│   └── 04_advanced_features.mp4
+└── FAQ.md
+```
+
+**Marketing materials:**
+- Website: aethelos.org/rescue
+- Screenshots and demos
+- Comparison charts
+- Testimonials (from beta testers)
+
+**Success criteria:**
+- Documentation is clear and comprehensive
+- New users can follow tutorials easily
+- Performance meets targets (boot <10s, queries <1s)
+
+---
+
+### Phase 6: Beta Testing (Weeks 11-12)
+**Dependencies:** Phase 5 complete
+
+**Goals:**
+- ✅ Real-world testing
+- ✅ Bug fixes
+- ✅ Performance tuning
+- ✅ User feedback
+
+**Beta testers:**
+- IT professionals (10-20 people)
+- Data recovery specialists (5-10 people)
+- Digital forensics experts (3-5 people)
+- Power users (20-30 people)
+
+**Feedback channels:**
+- Discord server
+- GitHub issues
+- Email support
+- User surveys
+
+**Success criteria:**
+- <5 critical bugs
+- >90% user satisfaction
+- Performance targets met
+- Ready for public release
+
+---
+
+## Technical Architecture
+
+### Boot Process
+
+```
+1. BIOS/UEFI loads bootloader (GRUB)
+   ↓
+2. GRUB loads AethelOS kernel (heartwood.bin)
+   ↓
+3. Kernel initializes:
+   - Memory allocator (Mana Pool)
+   - Interrupt handling (Attunement)
+   - VGA text mode
+   ↓
+4. Detect rescue mode boot:
+   if boot_from_usb {
+       enter_rescue_mode();
+   }
+   ↓
+5. Initialize rescue systems:
+   - Scan for storage devices
+   - Auto-detect filesystems
+   - Initialize World-Tree indexing
+   ↓
+6. Start Eldarin shell in rescue mode
+   - Load rescue commands
+   - Display welcome message
+   - Wait for user input
+```
+
+---
+
+### Rescue Mode Detection
+
+```rust
+// heartwood/src/main.rs
+
+fn detect_rescue_mode() -> bool {
+    // Check kernel command line
+    if kernel_cmdline_contains("rescue") {
+        return true;
+    }
+
+    // Check if booted from removable media
+    if boot_device_is_removable() {
+        return true;
+    }
+
+    // Check for rescue partition marker
+    if exists("/boot/aethelos/rescue-mode") {
+        return true;
+    }
+
+    false
+}
+
+fn main() -> ! {
+    // Standard initialization
+    heartwood_init();
+
+    if detect_rescue_mode() {
+        rescue::enter_rescue_mode();
+    } else {
+        // Normal AethelOS boot
+        start_normal_mode();
+    }
+}
+```
+
+---
+
+### Rescue Mode Initialization
+
+```rust
+// heartwood/src/rescue/mod.rs
+
+pub fn enter_rescue_mode() -> ! {
+    println!("\n◈━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━◈");
+    println!("◈                                        ◈");
+    println!("◈   AethelOS Rescue Edition v0.3.0      ◈");
+    println!("◈   \"When Systems Fall, The Healer Arrives\" ◈");
+    println!("◈                                        ◈");
+    println!("◈━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━◈\n");
+
+    println!("◈ Initializing rescue systems...");
+
+    // Scan for storage devices
+    let devices = scan_storage_devices();
+    println!("  ✓ Found {} storage devices", devices.len());
+
+    // Initialize VFS
+    vfs::init();
+    println!("  ✓ VFS layer ready");
+
+    // Initialize World-Tree indexing
+    world_tree::init_rescue_mode();
+    println!("  ✓ World-Tree indexing ready");
+
+    println!("\n◈ Rescue mode active. Type 'help' for commands.\n");
+
+    // Start Eldarin shell in rescue mode
+    eldarin::start_rescue_shell();
+}
+```
+
+---
+
+### World-Tree Indexing for Rescue
+
+```rust
+// groves/world-tree_grove/src/rescue/indexing.rs
+
+pub struct RescueIndexer {
+    vfs: &'static VfsManager,
+    index: MetadataIndex,
+}
+
+impl RescueIndexer {
+    /// Index an existing filesystem (non-destructive)
+    pub fn index_filesystem(&mut self, mount: &str) -> Result<(), IndexError> {
+        let fs = self.vfs.get(mount).ok_or(IndexError::NotMounted)?;
+
+        println!("  Indexing {}...", mount);
+
+        // Walk filesystem tree
+        let mut files_indexed = 0;
+        self.walk_directory(fs, "/", |path, stat| {
+            // Extract metadata
+            let metadata = extract_metadata(path, stat)?;
+
+            // Add to index
+            self.index.insert(path, metadata)?;
+
+            files_indexed += 1;
+            if files_indexed % 1000 == 0 {
+                print!("\r  Indexed {} files...", files_indexed);
+            }
+
+            Ok(())
+        })?;
+
+        println!("\r  ✓ Indexed {} files", files_indexed);
+        Ok(())
+    }
+
+    /// Extract metadata from file
+    fn extract_metadata(&self, path: &str, stat: &FileStat) -> Metadata {
+        Metadata {
+            essence: detect_essence(path, stat),
+            size: stat.size,
+            created: stat.created,
+            modified: stat.modified,
+            // More metadata extraction...
+        }
+    }
+}
+```
+
+---
+
+### Version Tracking During Rescue
+
+```rust
+// groves/world-tree_grove/src/rescue/versioning.rs
+
+pub struct VersionTracker {
+    snapshots: HashMap<PathBuf, Vec<Version>>,
+}
+
+impl VersionTracker {
+    /// Track a file when it's first accessed
+    pub fn track_file(&mut self, path: &Path, fs: &dyn FileSystem) -> Result<()> {
+        let data = fs.read(path)?;
+        let hash = sha256(&data);
+
+        let version = Version {
+            timestamp: now(),
+            hash,
+            size: data.len() as u64,
+        };
+
+        self.snapshots.entry(path.to_path_buf())
+            .or_insert_with(Vec::new)
+            .push(version);
+
+        // Store blob in World-Tree
+        world_tree::store_blob(&hash, &data)?;
+
+        Ok(())
+    }
+
+    /// Get version history for a file
+    pub fn get_versions(&self, path: &Path) -> Vec<&Version> {
+        self.snapshots.get(path)
+            .map(|v| v.iter().collect())
+            .unwrap_or_default()
+    }
+
+    /// Restore file to previous version
+    pub fn restore(&self, path: &Path, version_idx: usize, fs: &mut dyn FileSystem) -> Result<()> {
+        let versions = self.snapshots.get(path)
+            .ok_or(VersionError::NotTracked)?;
+
+        let version = versions.get(version_idx)
+            .ok_or(VersionError::InvalidVersion)?;
+
+        // Retrieve blob from World-Tree
+        let data = world_tree::read_blob(&version.hash)?;
+
+        // Write back to filesystem
+        fs.write(path, &data)?;
+
+        println!("✓ Restored {} to version {}", path.display(), version_idx + 1);
+        Ok(())
+    }
+}
+```
+
+---
+
+## Competitive Analysis
+
+### vs. SystemRescue
+
+| Feature | SystemRescue | AethelOS Rescue |
+|---------|--------------|-----------------|
+| **Interface** | Bash (1980s) | Eldarin (2020s) |
+| **Boot time** | ~60 seconds | <10 seconds |
+| **File search** | `find` (slow, path-based) | World-Tree queries (fast, intelligent) |
+| **Versioning** | None | Automatic |
+| **Filesystem support** | Many (via kernel drivers) | FAT32, ext4, NTFS (v0.3); expandable |
+| **Multi-FS queries** | Manual mounting + scripting | Native cross-filesystem search |
+| **Safety** | C (prone to crashes) | Rust (memory-safe) |
+| **Learning curve** | Steep (expert-only) | Gentle (plain language) |
+| **Documentation** | Technical wiki | Interactive help + video tutorials |
+| **License** | GPL | MIT/Apache 2.0 |
+
+**Verdict:** SystemRescue is powerful but dated. AethelOS is modern and accessible.
+
+---
+
+### vs. GParted Live
+
+| Feature | GParted Live | AethelOS Rescue |
+|---------|--------------|-----------------|
+| **Primary focus** | Partition editing | File recovery + rescue |
+| **Interface** | GUI + command line | Beautiful CLI (Eldarin) |
+| **File recovery** | Not primary function | Core feature |
+| **Boot repair** | Limited | Comprehensive |
+| **Intelligent search** | None | World-Tree queries |
+| **Versioning** | None | Automatic |
+
+**Verdict:** GParted is great for partitioning. AethelOS focuses on rescue/recovery.
+
+---
+
+### vs. Hiren's Boot CD
+
+| Feature | Hiren's Boot CD | AethelOS Rescue |
+|---------|----------------|-----------------|
+| **Last update** | 2012 (abandoned) | Active development |
+| **Windows focus** | Yes | Cross-platform |
+| **Modern FS support** | Limited | Full (FAT32, ext4, NTFS, more) |
+| **License** | Proprietary/questionable | Open source (MIT/Apache) |
+| **Safety** | Old Windows tools (unsafe) | Rust (modern, safe) |
+
+**Verdict:** Hiren's is outdated. AethelOS is the modern replacement.
+
+---
+
+### vs. Clonezilla
+
+| Feature | Clonezilla | AethelOS Rescue |
+|---------|------------|-----------------|
+| **Primary focus** | Disk cloning | General rescue + cloning |
+| **Interface** | ncurses (1990s) | Eldarin (modern CLI) |
+| **Intelligent cloning** | Sector-by-sector or partition-aware | Smart cloning (skip junk) |
+| **File-level operations** | Limited | Full support |
+| **Search capabilities** | None | World-Tree queries |
+
+**Verdict:** Clonezilla for pure cloning. AethelOS for everything else + smart cloning.
+
+---
+
+## Marketing Strategy
+
+### Positioning
+
+**Primary message:**
+> "The rescue disc you've always wanted. Beautiful, intelligent, safe."
+
+**Secondary messages:**
+- "Your data deserves better than grep"
+- "When systems fail, the Healer arrives"
+- "Rescue operations that don't suck"
+
+---
+
+### Target Channels
+
+#### 1. Technical Communities
+
+**Reddit:**
+- /r/sysadmin
+- /r/linux
+- /r/datarecovery
+- /r/techsupport
+- /r/homelab
+
+**Posts:**
+- Launch announcement
+- Before/after comparisons (vs SystemRescue)
+- User success stories
+- Technical deep-dives
+
+---
+
+#### 2. YouTube / Video
+
+**Content ideas:**
+- "Recovering a Crashed Windows PC in 5 Minutes"
+- "World-Tree Queries: Find ANY File in Seconds"
+- "Fixing a Broken Linux Bootloader - The Easy Way"
+- "AethelOS vs SystemRescue: Side-by-Side Comparison"
+
+**Creators to approach:**
+- Level1Techs
+- Linus Tech Tips (Linux content)
+- NetworkChuck
+- Brodie Robertson
+
+---
+
+#### 3. Blogs / Articles
+
+**Platforms:**
+- Hacker News (Show HN: AethelOS Rescue Edition)
+- Ars Technica
+- Phoronix
+- The Register
+- Linux Magazine
+
+**Angles:**
+- "New Rust-based rescue OS challenges SystemRescue"
+- "World-Tree: Git-like versioning for your entire disk"
+- "Beautiful CLI that makes rescue operations actually enjoyable"
+
+---
+
+#### 4. Professional Networks
+
+**LinkedIn:**
+- IT professional groups
+- Sysadmin communities
+- Data recovery specialists
+
+**Conferences:**
+- LISA (USENIX Large Installation System Administration)
+- ShmooCon (security/forensics)
+- DEF CON (villages/workshops)
+
+---
+
+### Launch Plan
+
+#### Pre-Launch (Week -4 to -1)
+
+**Build anticipation:**
+- Teaser posts on social media
+- Developer blog posts
+- Early access beta program
+- Demo videos
+
+**Target: 1,000+ email signups for launch notification**
+
+---
+
+#### Launch Day (Week 0)
+
+**Major announcements:**
+- Hacker News (Show HN)
+- Reddit (multiple subreddits)
+- Twitter/X thread
+- YouTube release video
+- Blog post
+
+**Press outreach:**
+- Email to tech journalists
+- Press release to Ars Technica, Phoronix, etc.
+
+**Target: 10,000+ downloads in first week**
+
+---
+
+#### Post-Launch (Week 1-4)
+
+**Content series:**
+- Week 1: User testimonials
+- Week 2: Advanced features showcase
+- Week 3: Comparison videos (vs competitors)
+- Week 4: Use case tutorials
+
+**Community building:**
+- Discord server
+- GitHub discussions
+- User showcase (success stories)
+
+**Target: 50,000+ downloads in first month**
+
+---
+
+### Monetization (Optional)
+
+**Free:**
+- AethelOS Rescue Edition (core features)
+- Community support (Discord, forums)
+- Documentation and tutorials
+
+**Paid (Enterprise Edition):**
+- Priority email support
+- Advanced forensics tools
+- Bulk USB creation tools
+- Custom branding options
+- Training materials
+
+**Pricing:**
+- Individual: Free
+- Small business (1-10 users): $99/year
+- Enterprise (unlimited): $999/year
+- Perpetual license: $1,999
+
+**Revenue projection:**
+- Year 1: 100 paid customers × $500 avg = $50,000
+- Year 2: 500 paid customers × $500 avg = $250,000
+- Year 3: 2,000 paid customers × $500 avg = $1,000,000
+
+---
+
+## Success Metrics
+
+### Technical Metrics
+
+**Performance:**
+- ✅ Boot time: <10 seconds (target: 5 seconds)
+- ✅ Filesystem mount: <2 seconds
+- ✅ Query response: <1 second for typical queries
+- ✅ File copy: Within 2x of native OS speed
+- ✅ Indexing: >1,000 files/second
+
+**Reliability:**
+- ✅ Zero crashes during rescue operations
+- ✅ 100% data integrity (checksums verify)
+- ✅ Graceful error handling
+- ✅ No data loss in any scenario
+
+**Compatibility:**
+- ✅ Boots on 95%+ of x86-64 PCs
+- ✅ Reads FAT32/ext4/NTFS correctly
+- ✅ Works with UEFI and legacy BIOS
+- ✅ Compatible with all major USB brands
+
+---
+
+### User Metrics
+
+**Adoption:**
+- Week 1: 10,000 downloads
+- Month 1: 50,000 downloads
+- Month 3: 150,000 downloads
+- Month 6: 500,000 downloads
+- Year 1: 1,000,000+ downloads
+
+**Engagement:**
+- Discord: 1,000+ members by Month 3
+- GitHub stars: 5,000+ by Month 6
+- YouTube views: 100,000+ total by Month 6
+
+**Satisfaction:**
+- >90% user satisfaction (surveys)
+- >80% would recommend to colleagues
+- <5 critical bugs reported (Year 1)
+
+---
+
+### Business Metrics (If Monetizing)
+
+**Revenue:**
+- Year 1: $50,000 (100 enterprise customers)
+- Year 2: $250,000 (500 customers)
+- Year 3: $1,000,000 (2,000 customers)
+
+**Market share:**
+- 10% of SystemRescue users switch (Year 1)
+- 25% of new rescue disc users choose AethelOS (Year 2)
+- #1 rescue disc for new users (Year 3)
+
+---
+
+## Conclusion
+
+**AethelOS Rescue Edition is not just a feature—it's the killer app.**
+
+It solves real problems today, builds a user base naturally, and creates a path to full OS adoption.
+
+**The vision:**
+1. **Rescue disc everyone uses** (Year 1)
+2. **Gateway to AethelOS adoption** (Year 2-3)
+3. **Ecosystem builds around it** (Year 3+)
+
+This is how you bootstrap an operating system:
+- Not by asking people to abandon their OS
+- But by becoming essential to their current workflow
+- Then naturally growing into their daily driver
+
+**Status:** Ready to implement
+**Timeline:** 12 weeks to v0.3.0 release
+**Next step:** Begin Phase 1 (Foundation)
+
+---
+
+*"The Healer arrives not with force, but with grace. It does not demand you change your ways, but offers help when you need it most. And in that moment of crisis, you see its beauty—and you wonder why you ever settled for less."*
+
+**Let's build the rescue disc the world deserves.** 🚀
+
+---
+
+## Appendices
+
+### Appendix A: Example Use Cases (Extended)
+
+See [SCENARIOS.md](rescue/SCENARIOS.md) for 20+ detailed scenarios
+
+### Appendix B: Command Reference
+
+See [COMMAND_REFERENCE.md](rescue/COMMAND_REFERENCE.md) for complete command documentation
+
+### Appendix C: Filesystem Support Matrix
+
+See [FILESYSTEM_SUPPORT.md](rescue/FILESYSTEM_SUPPORT.md) for detailed compatibility info
+
+### Appendix D: Bootloader Repair Guide
+
+See [BOOTLOADER_REPAIR.md](rescue/BOOTLOADER_REPAIR.md) for step-by-step repair procedures
+
+---
+
+## References
+
+- **VFS Plan:** [VFS_PLAN.md](VFS_PLAN.md)
+- **World-Tree Plan:** [WORLD_TREE_PLAN.md](WORLD_TREE_PLAN.md)
+- **SystemRescue:** https://www.system-rescue.org/
+- **Clonezilla:** https://clonezilla.org/
+- **TestDisk/PhotoRec:** https://www.cgsecurity.org/
+- **GRUB Documentation:** https://www.gnu.org/software/grub/manual/