LAB-516: master-key rotation — client-side keyring with grace window (decision + normative spec)#34

Merged

27Bslash6 merged 2 commits into

mainfrom

lab-516-key-rotation-decision

Jul 23, 2026

Commits on Jul 23, 2026

LAB-516: decide master-key rotation — client-side keyring with grace window

27Bslash6
and
multica-agent
committed
LAB-516: address CodeRabbit review — conditional decryptability, operator-enforced forward-only rule, derived-key fingerprint pin, flow inputs + intermediate-retry semantics

27Bslash6
and
multica-agent
committed