feat(encryption): keyring rotation — previous_master_keys + fingerprint selection (LAB-684) - #261

Merged

27Bslash6 merged 7 commits into

mainfrom

lab-684-keyring-rotation-py

Aug 8, 2026

Commits on Aug 7, 2026

feat(encryption): keyring rotation surface — previous_master_keys + fingerprint selection (LAB-684)
27Bslash6
committed
cb33221
fix(encryption): apply crypto expert-panel findings (LAB-684)
27Bslash6
committed
d4fb28b
fix(deps): constrain h2>=4.4.1 — GHSA-6hr6-w5qg-qmwg (LAB-684)
27Bslash6
committed
39bdd22
fix(encryption): separate keyring config errors from auth_tamper (LAB-684)
Mark S
committed
b46513c
fix(encryption): narrow keyring config class to local faults, stop read-path swallow (LAB-684)
Mark S
committed
bc7a91f
fix(encryption): re-raise keyring config errors at the L1 read sites too (LAB-684)
Mark S
committed
1e9efd9
fix(encryption): reset stats token on the sync L1 keyring-config re-raise (LAB-684)
Mark S
committed
d4de35c