feat: installed compatibility and safe profile migration (#62) #117

Merged

kilo merged 2 commits from issue-62-installed-compatibility into develop

2026-11-05 01:04:55 +00:00

kilo commented

2026-11-04 19:39:46 +00:00

Member

Refs #62

Adds explicit new-file SOPS profile rotation with retained source, default full-field policy verification and empty-value preservation; synthetic encrypted profile recovery and refusal tests; installed legacy schema/identity migration and refusal fixtures; uninstall retention checks; and bounded compatibility/lifecycle documentation. Real keys, real profile migration, live inference, release and other platforms are not established.

Base 97fedb7e3c67026c5987a2806a419cef914fdad7; head 0d9965a85d64e72bfc755bfab7772be668bf547e. Local sanitized offline make check passed (2503 passed, 89 skipped, 106 subtests); make package-check passed, including synthetic SOPS/age installed test and legacy-reader migrations. Exact-head CI run #3531 passed.

Independent whole-PR review ordinal 5/10 requested two SOPS fixes; addressed in 0d9965a85d64e72bfc755bfab7772be668bf547e. Ordinal 6 returned COMMENT without findings due to reviewer context contamination. Fresh ordinal 7/10 independently approved the full exact-head PR with no findings; reviewer independently passed both gates. Approval is limited to declared synthetic/offline cells, not live or universal compatibility.

Refs #62 Adds explicit new-file SOPS profile rotation with retained source, default full-field policy verification and empty-value preservation; synthetic encrypted profile recovery and refusal tests; installed legacy schema/identity migration and refusal fixtures; uninstall retention checks; and bounded compatibility/lifecycle documentation. Real keys, real profile migration, live inference, release and other platforms are not established. Base `97fedb7e3c67026c5987a2806a419cef914fdad7`; head `0d9965a85d64e72bfc755bfab7772be668bf547e`. Local sanitized offline `make check` passed (2503 passed, 89 skipped, 106 subtests); `make package-check` passed, including synthetic SOPS/age installed test and legacy-reader migrations. Exact-head CI run #3531 passed. Independent whole-PR review ordinal 5/10 requested two SOPS fixes; addressed in `0d9965a85d64e72bfc755bfab7772be668bf547e`. Ordinal 6 returned COMMENT without findings due to reviewer context contamination. Fresh ordinal 7/10 independently approved the full exact-head PR with no findings; reviewer independently passed both gates. Approval is limited to declared synthetic/offline cells, not live or universal compatibility.

kilo added 1 commit

2026-11-04 19:39:46 +00:00