2026-06-12 17:38:55 +00:00 · 2026-05-05 18:18:29 +00:00
parent 7c5cc57d75
commit 75097909e9
71 changed files with 95 additions and 771 deletions
@@ -7,7 +7,7 @@
 --
 -- All operations use IF NOT EXISTS / IF EXISTS so the migration is
 -- idempotent — safe to re-run on every certctl-server boot per the
-- "Idempotent migrations" architecture decision in CLAUDE.md.
+-- the project's "Idempotent migrations" architecture decision.
 --
 -- Defense in depth: NEVER persist CA private key bytes. The
 -- key_driver_id column is a reference (filesystem path / KMS key ID