6 Commits

Author	SHA1	Message	Date
root	335498d069	client-add: house (finalize age_pubkey + grant shared + hermes secrets)	2026-06-28 15:59:47 +02:00
root	76bbe99798	client-add: mac-mini (finalize age_pubkey + grant shared + hermes secrets)	2026-06-01 22:50:36 +02:00
root	aed977aa56	client-remove: test-victim	2026-05-20 19:29:47 +02:00
root	ea3100f091	client-add: test-victim (finalize age_pubkey + grant shared secrets)	2026-05-20 19:29:36 +02:00
root	58bd4df3b1	client-enrol: republic-laptop pubkey + hello.yaml recipient ... Phase 2 first workstation enrolled. age1vf8... is republic-laptop's issued pubkey; added as a recipient on hello.yaml so the post-bootstrap decrypt test works there. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 17:34:30 +02:00
root	bc578df39b	secrets: add encrypted hello.yaml (bootstrap verification) ... Encrypted to hubris + apps; expand recipients as new clients enrol via 'sops updatekeys -y secrets/hello.yaml'. Tests the full sops + age path. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 16:39:33 +02:00