Marc-André Bombeck 8ad5b90f88 docs(ops): the off-host worker never prunes; the bucket lifecycle does ...

The runbook said the worker prunes objects older than BACKUP_RETENTION_DAYS. It never calls DeleteObject; its grant is PutObject, GetObject and AbortMultipartUpload, on purpose, so a compromised worker cannot wipe the history. The sentence now says what expires objects and what the variable is for.

2026-09-10 00:48:31 +02:00

..

migrations

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

attempt-number-semantics.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00

backup-restore.md

docs(ops): the off-host worker never prunes; the bucket lifecycle does

2026-09-10 00:48:31 +02:00

deploy.md

Bring the self-hosting guides in line with the shipped code

2026-08-27 12:21:27 +02:00

encryption-key-rotation.md

fix(crypto): rotate the backup blob and stop keying the registry on names

2026-09-03 06:29:57 +02:00

env-check.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00

intake-repair.md

fix: harden pnpm supply chain and runtime image (#572)

2026-07-21 04:36:53 +02:00

mfa-enforcement.md

docs(security): note that required-MFA prompts but does not wall the API

2026-06-27 22:23:54 +02:00

password-reset.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00

security-recovery.md

docs(01-09): document security contract changes

2026-07-29 14:08:37 +02:00

tls-cert-pin.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00