Skip to content

docs: record secrets root of trust - #12

Merged
jmgilman merged 1 commit into
masterfrom
session-005/secrets-root-of-trust-docs
Aug 19, 2026
Merged

docs: record secrets root of trust#12
jmgilman merged 1 commit into
masterfrom
session-005/secrets-root-of-trust-docs

Conversation

@jmgilman

@jmgilman jmgilman commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

Summary

  • record scoped AWS KMS as the routine SOPS decryption path
  • record YubiKey-backed PGP recovery and exact encryption-subkey selection
  • define the generated-durable exception and consumer IAM grant invariant

Test plan

  • mise exec -- moon run docs:build --summary minimal

Companion implementation: https://github.com/GilmanLab/secrets/pull/21

Document scoped KMS access, physical PGP recovery, and the generated-durable exception.
@jmgilman
jmgilman merged commit 6915ad5 into master Aug 19, 2026
2 checks passed
@jmgilman
jmgilman deleted the session-005/secrets-root-of-trust-docs branch August 19, 2026 01:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant