jfraeys/chore/secrets-p0-p1-recovery-key #27

Merged

jfraeys merged 3 commits from jfraeys/chore/secrets-p0-p1-recovery-key into main 2026-10-09 19:06:09 -04:00

Conversation 0 Commits 3 Files changed 4 +213 -2

jfraeys commented 2026-10-09 19:06:02 -04:00

Owner

Copy link

No description provided.

jfraeys added 3 commits 2026-10-09 19:06:02 -04:00

chore(secrets): add age recovery recipient and P0 secrets inventory ... 3802c6af30

Add a second age recipient (recovery key, private half in personal
Bitwarden) to .sops.yaml, a keygen script that stores it without printing
it, the P0 credential ownership inventory, and the recovery-key section of
secrets-recovery.md. Recovery-only decrypt drill not yet recorded.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

docs(secrets): record recovery-only decrypt drill result ... 54a9ec557e

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

docs(secrets): record out-of-scope drill; close P1 gate ... e115128aa7

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit de6847f52a into main 2026-10-09 19:06:09 -04:00

jfraeys referenced this pull request from a commit 2026-10-09 19:06:10 -04:00

Merge pull request 'jfraeys/chore/secrets-p0-p1-recovery-key' (#27) from jfraeys/chore/secrets-p0-p1-recovery-key into main

jfraeys referenced this pull request 2026-10-09 19:29:07 -04:00

chore(secrets): allow committing *.sops.yml; keep all recipients on rotation #28

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

jfraeys/infra!27

No description provided.