Marc-André Bombeck b04b1f2995 fix(encryption): sample several stored values before declaring a key mismatch ...

The boot check decided on the first value it found under a key id, so
one damaged or foreign-sealed row could take a correctly keyed server
down with 503 on every request. The probe now samples up to five
values, one per column first. One value that opens clears the key; a
mismatch needs at least two values and none opening. A single value
that does not open is inconclusive: the server keeps serving, writes no
canary, logs a warning and probes again at the next start.

Integration setup truncates encryption_key_canaries between tests.

2026-10-03 18:27:28 +02:00

..

__tests__

fix(security): grant private AI endpoints by exact origin, dialled pinned

2026-09-26 19:46:11 +02:00

key-check.ts

fix(encryption): sample several stored values before declaring a key mismatch

2026-10-03 18:27:28 +02:00

key-mismatch-state.ts

feat(encryption): back up the key, and refuse to serve when it cannot open the database

2026-10-03 18:06:28 +02:00

readiness-summary.ts

fix(security): keep ALLOW_LOCAL_AI_PRIVATE_HOSTS=true for the operator's own AI, deprecated

2026-09-26 20:59:10 +02:00