feat(custody): add independent Rust quorum barrier; keep migration staged - #153

Draft

seonghobae wants to merge 13 commits into

fix/remove_stale_hourly_pr_steward_test_20260910from

fix/bootstrap_secret_mounts_no_dotenv_20260910

Commits on Sep 9, 2026

test(deploy): require standalone bootstrap without dotenv secret authority
seonghobae
committed
147cb2c
feat(deploy): add bounded Keycloak bootstrap secret entrypoint
seonghobae
committed
b8574bf
fix(deploy): replace dotenv bootstrap secrets with mounted supervisor files
seonghobae
committed
af76108
chore(deploy): remove dotenv bootstrap credential template
seonghobae
committed
46ca43c
docs(deploy): replace dotenv quickstart with protected bootstrap mounts
seonghobae
committed
02ee560
docs(agent): align bootstrap guidance with no-dotenv credential authority
seonghobae
committed
2edb405
docs(bootstrap): keep descriptor non-secret and separate from Key Vault custody
seonghobae
committed
31f7c95
docs(adr): define no-dotenv Keyverse self-bootstrap boundary
seonghobae
committed
54d46f2
docs(adr): reserve bootstrap transport decision after active vault stack
seonghobae
committed
a8c5713
docs(changelog): record removal of dotenv root bootstrap
seonghobae
committed
cf8498d

Commits on Sep 10, 2026