security review part 4: 18 finding rows (R-970..R-987), notes on R-935/R-132/R-908, the rotation date in secrets.md (101 -> 119 rows)

2026-10-12 17:10:19 +02:00
parent 013ee81369
commit daf942fc7a
2 changed files with 32 additions and 10 deletions
@@ -120,6 +120,10 @@ shred -u /path/to/keyfile
   - the SAME call with the OLD key returns 401 — only now is the git-history copy dead.
 5. Update the password-manager entry; note the rotation date in the publish-runbook disposition.

+**Rotated 2026-10-12** (operator GO; security review, R-950): steps 1–4 done. Check after the restart: the new
+key answered 200 and the old key 403/401 — the old value is dead, including every copy in git history. All three boxes
+reported normally. Step 5 (the password manager) is the operator's.
+
 ---

 ## Off-site password sealing key — `Secret/offsite-secret-key` (hub v0.127.0, decision 69, R-821)