Skip to content

feat(TC-887): at-rest keyring, key store and migration #326

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
samgbafa wants to merge 19 commits into
base: skgbafa/tc-887-s1-escrow
Choose a base branch
from
Draft

feat(TC-887): at-rest keyring, key store and migration #326

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
258de34
feat(TC-887): at-rest keyring, key store and migration
samgbafa Oct 17, 2026
5fab9c0
feat(TC-887): expose the verified escrow record
samgbafa Oct 17, 2026
9ccd989
fix(TC-887): atomic rotation, chain-only recovery, DEK mirror; review…
samgbafa Oct 17, 2026
5bd7656
test(TC-887): roll the cursor-index lock test back to its own migrati…
samgbafa Oct 17, 2026
89967a2
Merge commit 'f423ba9' into skgbafa/tc-887-s1-keyring
samgbafa Oct 17, 2026
8f5e8ab
fix(TC-887): store only authenticated mirror rows; pin before re-spli…
samgbafa Oct 17, 2026
4eb6ebc
fix(TC-887): escrow is established only at boot; read paths are read-…
samgbafa Oct 17, 2026
c4e4120
Merge commit '8083ca2' into skgbafa/tc-887-s1-keyring
samgbafa Oct 17, 2026
27f9430
fix(TC-887): name the chain walk resolve_chain (single DID-resolution…
samgbafa Oct 17, 2026
9b54bb7
fix(TC-887): never store mirror seal bytes; non-secret gate reasons (…
samgbafa Oct 17, 2026
c4ab37f
Merge commit 'a0d57fa' into skgbafa/tc-887-s1-keyring
samgbafa Oct 17, 2026
c296f66
fix(TC-887): mirror contents never stop a node with a healthy databas…
samgbafa Oct 17, 2026
17e1091
chore(TC-887): rename the at-rest migration to m20261017_010000_at_re…
samgbafa Oct 17, 2026
424dbde
Merge branch 'skgbafa/tc-887-s1-escrow' into skgbafa/tc-887-s1-keyring
samgbafa Oct 17, 2026
9f17af3
fix(TC-887): never replace a mirrored DEK; guarded pre-ceremony re-sp…
samgbafa Oct 17, 2026
eee68da
fix(TC-887): pre-ceremony holder fix replaces the ARK; take S3's writ…
samgbafa Oct 17, 2026
3befa10
chore(TC-887): log the data-key object name when a mirrored DEK fails…
samgbafa Oct 17, 2026
01055c7
fix(TC-887): an existing ARK never gets a second bundle for other hol…
samgbafa Oct 17, 2026
9131d24
fix(TC-887): an unreadable retirement marker never stops a node in mo…
samgbafa Oct 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading