docs+test(secrets): P7 per-project SOPS convention and key-isolation test #109

Merged

jfraeys merged 2 commits from jfraeys/docs/p7-project-secrets into main 2026-10-13 13:52:28 -04:00

Conversation 0 Commits 2 Files changed 5 +72

jfraeys commented 2026-10-13 13:06:51 -04:00

Owner

Copy link

ADR 0001 (secrets/.sops.yml everywhere), a Secrets section in the app deployment contract, the P7 gate row, and scripts/tests/test-project-key-isolation.sh (8 cases with throwaway keys: each project's operator and recovery key decrypts only its own file). Wired into lint; skips where sops is missing.

🤖 Generated with Claude Code

ADR 0001 (secrets/<name>.sops.yml everywhere), a Secrets section in the app deployment contract, the P7 gate row, and scripts/tests/test-project-key-isolation.sh (8 cases with throwaway keys: each project's operator and recovery key decrypts only its own file). Wired into lint; skips where sops is missing. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit 2026-10-13 13:06:51 -04:00

docs+test(secrets): P7 per-project SOPS convention, contract section, key-isolation test ... e1b61bd68c

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys added 1 commit 2026-10-13 13:06:59 -04:00

docs(secrets): link the P7 PRs ... c67dbf94d7

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit 7e7f6eba9e into main 2026-10-13 13:52:28 -04:00

jfraeys referenced this pull request from a commit 2026-10-13 13:52:31 -04:00

Merge pull request 'docs+test(secrets): P7 per-project SOPS convention and key-isolation test' (#109) from jfraeys/docs/p7-project-secrets into main

jfraeys referenced this pull request 2026-10-13 14:25:55 -04:00

Roadmap: remaining infra and secrets work (tracker) #122

jfraeys referenced this pull request 2026-10-13 15:08:47 -04:00

P7: project secrets keys and drills (forge-agent, app-skeleton) #118

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

jfraeys/infra!109

No description provided.