scripts: manifest bearer gate lands as manifest_bearer_gate.py (the .gitignore *secret* pattern silently un-tracks any 'secret'-named gate file - the previous commit's gate never made it into git); references updated

This commit is contained in:
2026-07-13 14:59:31 +02:00
parent 80aca3a3a1
commit 3682303131
5 changed files with 57 additions and 4 deletions
@@ -96,7 +96,7 @@ floor lands his controller at 0.120 automatically.
carried over from the 0.81/0.113 train. Rotate + move to a `secretKeyRef` (Resend-key pattern,
documentation/runbooks/secrets.md) as an operator hygiene task.~~
**DISPOSITION 2026-07-13 (hub v0.53.0):** moved to `secretKeyRef: report-api/REPORT_API_KEY`
(literal removed from the manifest; `scripts/manifest_secret_gate.py` blocks reintroduction).
(literal removed from the manifest; `scripts/manifest_bearer_gate.py` blocks reintroduction).
The value ROTATION itself is the supervised step in documentation/runbooks/secrets.md
§"Operator/global bearer key" — the git-history copy is dead only after it runs.