overtrue 1d305aeb5b docs(sse): record SSE-C as measured-readable in the migration matrix ...

The SSE-C row moves from unverified to supported now that a MinIO-generated SSE-C object reads end to end, with the test that establishes it. Single-part stays unverified for all three schemes — the fixture harness still cannot load objects MinIO inlined into xl.meta.

Also notes the one behavioural difference an operator will observe: a MinIO SSE-C object stores no customer-key MD5, so a wrong key is refused by the decryption rather than by the earlier parameter-mismatch check. Different error, same outcome.

Refs rustfs/backlog#1638.

2026-08-19 09:25:10 +08:00

..

atomic-object-undo.md

…

authing-oidc-integration.md

…

dial9-runtime-profiling.md

…

drive-timeout-tuning.md

fix(cluster): clarify peer health and listing timeouts (#5086)

2026-07-21 11:11:24 +00:00

durability-modes.md

docs(durability): document the new-bucket relaxed default (#5973)

2026-08-12 13:48:15 +08:00

get-path-experimental-switches.md

docs(operations): record the two experimental GET-path switches (#6041)

2026-08-13 08:08:48 +08:00

heal-concurrency-safety-notes-zh.md

test(heal): lock heal vs delete/overwrite race invariants (HS-12) (#6183)

2026-08-18 02:01:04 +00:00

hotpath-warp-ab-runbook.md

…

hotpath-warp-abba-runbook.md

feat: add GET stream failure observability (#5967)

2026-08-12 03:32:17 +00:00

internode-grpc-benchmark-runbook.md

feat(internode): track msgpack decode traffic (#5309)

2026-07-26 17:03:58 +00:00

internode-msgpack-json-convergence-runbook.md

feat(internode): track msgpack decode traffic (#5309)

2026-07-26 17:03:58 +00:00

keycloak-oidc-integration.md

fix(iam): preserve OIDC outbound policy errors (#5762)

2026-08-08 19:28:47 +08:00

kms-admin-contract.md

fix(kms): report unreadable keys and bound list-keys page size (#5764)

2026-08-06 22:01:30 +08:00

kms-backend-security.md

docs(sse): record SSE-C as measured-readable in the migration matrix

2026-08-19 09:25:10 +08:00

kms-cryptographic-compliance.md

test(kms): move the Vault KV2 doc guard into check_fips_wording.sh (#6215)

2026-08-18 21:46:00 +08:00

kms-disaster-recovery-drill.md

feat(kms): add a disaster-recovery drill harness for KMS backups (#5587)

2026-08-01 19:38:20 +00:00

kms-observability-runbook.md

feat(kms): report a key as due for rotation once its wrap budget is spent (#6059)

2026-08-13 23:21:37 +08:00

kms-per-key-authorization.md

feat(policy): add built-in KMS role policies and a negative authorization matrix (#5588)

2026-08-01 19:33:33 +00:00

log-diagnose.md

…

nats-jetstream.md

…

no-parity-bitrot-recovery.md

…

object-io-tuning-ab-matrix.md

perf(get): avoid materialized body clone (#6109)

2026-08-14 17:25:10 +08:00

openid-compatibility-issues-for-vendor.md

…

outbound-connection-policy.md

fix(iam): preserve OIDC outbound policy errors (#5762)

2026-08-08 19:28:47 +08:00

replication-check.md

fix(replication): probe the version-identity contract in replication-check (#5881)

2026-08-11 03:04:05 +00:00

reverse-proxy.md

…

rolling-restart.md

fix(rebalance): converge multipart data movement retries (#6057)

2026-08-13 06:12:26 +00:00

scanner-benchmark-runbook.md

feat(scanner): define replication boundary contract (#3630)

2026-06-23 21:35:36 +08:00

scanner-excess-alerts_zh.md

feat(scanner): emit excess alerts as S3 notification events (HS-04) (#6176)

2026-08-18 08:46:32 +08:00

scanner-excess-alerts.md

feat(scanner): emit excess alerts as S3 notification events (HS-04) (#6176)

2026-08-18 08:46:32 +08:00

scanner-runtime-controls.md

feat(heal): aggregate replacement recovery status (#5916)

2026-08-10 05:03:27 +00:00

sftp.md

…

tier-ilm-debugging.md

fix(tiering): bind recovery to transaction metadata (#5409)

2026-07-29 18:44:44 +00:00

vault-kms-authentication.md

fix(kms): resolve Vault auth from the environment at startup and add Kubernetes auth (#6095)

2026-08-17 14:12:39 +08:00