Repository navigation

fix(policy): reject concurrent and non-active key rotations - #4200

Merged

c-r33d merged 6 commits into

mainfrom

codex/cks-rotation-active-guard

Oct 14, 2026

Merged

fix(policy): reject concurrent and non-active key rotations#4200
c-r33d merged 6 commits into
mainfrom
codex/cks-rotation-active-guard

Commits on Oct 8, 2026
- fix(policy): serialize key rotation and record successor
  c-r33d
  committed
  5330930
- fix(policy): preserve key metadata during rotation
  c-r33d
  committed
  f2c2cb1
- fix(policy): reject stale rotation before reading source
  c-r33d
  committed
  95da6b6
- fix(policy): reuse existing rotation error contract
  c-r33d
  committed
  b45ea00
- fix(policy): validate rotation sources and consolidate coverage
  c-r33d
  committed
  28221af
Commits on Oct 14, 2026
- fix(policy): skip rotation check for incomplete base keys
  c-r33d
  committed
  b6cd558