overtrue 2f597b2855 docs(kms): add the disaster-recovery drill runbook ...

Documents the procedure the harness automates: what a drill measures and why
the object probe rather than the manifest digest is the acceptance criterion,
the per-backend responsibility split, the disaster matrix, how to read the
evidence bundle, the two interrupted-cutover outcomes, and the Vault variant
whose cryptographic root comes back through Vault's own flow.

2026-08-02 02:49:10 +08:00

..

backends

feat(admin): expose KMS backup and restore behind explicit guards (#5579)

2026-08-01 14:31:25 +00:00

backup

docs(kms): add the disaster-recovery drill runbook

2026-08-02 02:49:10 +08:00

encryption

feat(kms): add master key version to data key envelope contract (#5480)

2026-07-30 16:43:10 +00:00

snapshots

fix(kms): honour the configured metadata cache TTL and metrics switch (#5569)

2026-08-01 13:27:33 +00:00

api_types.rs

fix(kms): honour the configured metadata cache TTL and metrics switch (#5569)

2026-08-01 13:27:33 +00:00

audit.rs

fix(kms): refuse to rotate a Vault key whose baseline version was erased (#5578)

2026-08-01 14:02:52 +00:00

cache.rs

fix(kms): honour the configured metadata cache TTL and metrics switch (#5569)

2026-08-01 13:27:33 +00:00

config.rs

fix(kms): honour the configured metadata cache TTL and metrics switch (#5569)

2026-08-01 13:27:33 +00:00

deletion_worker.rs

fix(kms): make the deletion waiting window non-bypassable (#5535)

2026-08-01 12:23:28 +00:00

error.rs

fix(kms): refuse to rotate a Vault key whose baseline version was erased (#5578)

2026-08-01 14:02:52 +00:00

lib.rs

feat(kms): record real cache hit, miss and eviction metrics (#5531)

2026-08-01 05:19:25 +00:00

manager.rs

feat(admin): expose KMS backup and restore behind explicit guards (#5579)

2026-08-01 14:31:25 +00:00

policy.rs

feat(kms): add an AWS KMS backend (#5553)

2026-08-01 06:07:32 +00:00

probe.rs

feat(kms): add a synthetic encrypt-decrypt probe worker (#5543)

2026-08-01 12:30:35 +08:00

service_manager.rs

feat(kms): add an AWS KMS backend (#5553)

2026-08-01 06:07:32 +00:00

service.rs

feat(kms): allow key description and tag updates (#5546)

2026-08-01 06:32:47 +00:00

time_serde.rs

feat(s3): advance parity coverage (#2278)

2026-03-24 17:29:33 +08:00

types.rs

fix(kms): make the deletion waiting window non-bypassable (#5535)

2026-08-01 12:23:28 +00:00