Secret store: credential isolation, encryption at rest, output scrubbing - #260

Merged

jamiepine merged 11 commits into

mainfrom

Mar 1, 2026

Commits on Mar 1, 2026

feat: secret store — credential isolation, encryption at rest, output scrubbing, worker secret_set tool
jamiepine
committed
734b1b2
visual tweak + channel prompt reorder
jamiepine
committed
5d2b25c
fix button
jamiepine
committed
b73c822
fix: process-wide secret resolver and keyctl syscall correctness
jamiepine
committed
688a93d
fix: address review feedback — error logging, input validation, defense-in-depth
jamiepine
committed
598249a
fix: propagate non-ENOKEY errors in keystore delete_key
jamiepine
committed
380cb81
fix: mutation serialization, export perms, error handling in secrets store
jamiepine
committed
b64a050
fix: move macOS-only dep section to end of Cargo.toml
jamiepine
committed
549e130
fix: wrap libc::syscall in unsafe block for Rust 2024 edition
jamiepine
committed
c3a9d61
fix: probe keyring support at startup, never fail worker spawn
jamiepine
committed
24a2235
fix: use c-string literals for clippy manual_c_str_literals
jamiepine
committed
1508d79