Drive rematerialize directly with a group email template carrying a fake sealed secret: a descendant app gets one copy whose inbound-secret ciphertext + nonce byte-equal the template's (verbatim copy, no reseal), the reconcile is idempotent, and reparenting the app out of the subtree de-materializes the copy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>