fix(config): separate provisioning and require secret encryption - #193

Closed

seonghobae wants to merge 67 commits into

mainfrom

fix/runtime-store-provisioning-d0a4b30

Commits on Aug 14, 2026

test(config): expose implicit runtime provisioning authority
seonghobae
committed
395afb9
ci: repair runtime store provisioning boundary
seonghobae
committed
bcae84c
build: stage runtime provisioning repair helper
seonghobae
committed
f9734f3
ci: simplify runtime provisioning repair runner
seonghobae
committed
b509cc4
ci: remove self-modifying runtime repair writer
seonghobae
committed
0b7fc49
chore: remove one-shot runtime repair helper
seonghobae
committed
2a56dc2
ci: add read-only runtime provisioning probe
seonghobae
committed
7c152cd
ci: add deterministic runtime provisioning candidate generator
seonghobae
committed
12262f5
ci: repair read-only runtime provisioning probe
seonghobae
committed
3655519
ci: preserve read-only setup seams in runtime candidate
seonghobae
committed
71a5547
ci: bound schema diagnostics without exception context
seonghobae
committed
cc1dd88
fix(config): remove runtime schema provisioning authority
seonghobae
committed
7882883
fix(config): seed runtime defaults at schema boundary
seonghobae
committed
01a7ae2
ci: finalize verified runtime provisioning repair
seonghobae
committed
237e578
fix(config): finalize least-privilege runtime stores
seonghobae
committed
e639f48
test(config): reject selectable incompatible runtime relations
seonghobae
committed
0c88d83
fix(config): validate provisioned relation kind and column types
seonghobae
committed
472e738
test(config): model provisioned runtime catalog metadata
seonghobae
committed
e2b5fad
docs(config): define catalog compatibility and runtime role boundary
seonghobae
committed
5b86445
test(config): prove runtime read privilege boundary
seonghobae
committed
384cc25
fix(config): fail closed on runtime read privilege gaps
seonghobae
committed
ab81331
test(config): model runtime catalog privilege evidence
seonghobae
committed
33f231e
docs(config): bound search-path trust claim
seonghobae
committed
45f102e
test(config): assert structured ConfigError contract
seonghobae
committed
afaead9
test(security): require encrypted secret storage by default
seonghobae
committed
37174e6
fix(security): require secret encryption by default
seonghobae
committed
7a29783
test(security): make insecure secret storage opt-in
seonghobae
committed
f5369b2
test(security): preserve local lifecycle coverage explicitly
seonghobae
committed
6e7564a
test(security): make integration obfuscation explicit
seonghobae
committed
16574b6
docs(security): document encrypted secret-store default
seonghobae
committed
995c33f
test(config): isolate provisioning boundary from encryption policy
seonghobae
committed
f2d3088
test(config): prove malformed Fernet keys fail before database access
seonghobae
committed
4d0f317
fix(config): validate Fernet key before database access
seonghobae
committed
9c4028e
test(integration): avoid persisting unused plaintext secret
seonghobae
committed
40a9abb
test(config): require writable-key schema compatibility
seonghobae
committed
437a109
fix(config): verify unique runtime storage keys
seonghobae
committed
9226e87
test(config): model unique runtime storage keys
seonghobae
committed
c618bed
test(config): complete unique-key compatibility harness
seonghobae
committed
a5fc816
docs(doctoring): record unique-key runtime invariant
seonghobae
committed
42be189

Commits on Aug 15, 2026

test(config): reject include-only storage key indexes
seonghobae
committed
7c390a8
fix(config): ignore INCLUDE payload columns for uniqueness
seonghobae
committed
ca6a289
docs(config): clarify unique key versus INCLUDE payload
seonghobae
committed
1909321
test(config): reject deferrable conflict arbiters
seonghobae
committed
3ea0ffb
fix(config): exclude deferrable conflict arbiters
seonghobae
committed
4d41735
docs(config): record conflict-arbiter constraint boundary
seonghobae
committed
33ca438
test(config): fail closed on corrupt stored secrets
seonghobae
committed
38eaf9c
fix(config): reject corrupt stored secret encodings
seonghobae
committed
1471ce9
test(config): reject coerced persisted encryption flags
seonghobae
committed
7d6c6f8
fix(config): preserve persisted encryption flag type
seonghobae
committed
c6ab8bc
test(config): require encrypted legacy-secret readiness
seonghobae
committed
762a72e
fix(config): reject unencrypted legacy rows in required mode
seonghobae
committed
2669838
test(config): model encrypted-row readiness in fake store
seonghobae
committed
1c127d9
test(config): reject late unencrypted rows in required mode
seonghobae
committed
cfd8578
fix(config): enforce required encryption on reads
seonghobae
committed
f7e7904
test(config): initialize decode-boundary policy state
seonghobae
committed
da19e1f
test(secrets): reject unencrypted compatibility mode
seonghobae
committed
003183a
fix(secrets): make Fernet storage mandatory
seonghobae
committed
2f56333
test(secrets): require encrypted store fixtures
seonghobae
committed
085fd6a
test(secrets): preserve connection cleanup under mandatory encryption
seonghobae
committed
0dec24b
test(secrets): reject legacy plaintext decode paths
seonghobae
committed
e8258db
fix(secrets): preserve exact encryption-flag validation
seonghobae
committed
a8e6288
docs(secrets): remove insecure compatibility guidance
seonghobae
committed
c3c6559
test(secrets): exercise runtime probes with encryption enabled
seonghobae
committed
0697d57
test(secrets): keep index probes behind valid encryption
seonghobae
committed
4f9473c

Commits on Aug 16, 2026

test(config): reject Fernet key subclasses
seonghobae
committed
a3f16fb
fix(config): require exact Fernet key text
seonghobae
committed
7d04484
Merge branch 'main' into fix/runtime-store-provisioning-d0a4b30
opencode-agent[bot]
authored
7f421f4