overtrue 88155ff1a7 feat(kms): export local backend key material as sealed backup bundles ...

Adds the producer side of the Local backup series on top of the #5483
contract: a directory-wide export fence gives the snapshot a single
consistent generation, every artifact is AEAD-wrapped under a
caller-supplied backup KEK that is separate from the business trust
hierarchy, and the sealed manifest with completeness marker is written
last so an interrupted export can never be mistaken for a restorable
bundle. Restore and the admin API land in follow-up changes.

2026-07-31 10:12:33 +08:00

..

audit

fix(targets): unify runtime health snapshots (#5110)

2026-07-22 06:50:36 +00:00

checksums

ci(checksums): inherit workspace lint policy (#5415)

2026-07-29 12:53:45 +08:00

common

fix(scanner): report active first-cycle status (#5397)

2026-07-29 22:33:25 +08:00

concurrency

ci(concurrency): inherit workspace lint policy (#5420)

2026-07-29 16:40:56 +08:00

config

fix(ecstore): start with unresolved Kubernetes peers (#5460)

2026-07-30 11:14:38 +08:00

credentials

fix(credentials): enforce RPC fallback credential policy (#5005)

2026-07-19 23:26:42 +08:00

crypto

chore(deps): simplify dependency features (#4890)

2026-07-16 05:20:43 +00:00

data-usage

fix(data-usage): classify 1024-byte objects correctly (#5451)

2026-07-30 07:24:45 +08:00

e2e_test

test(e2e): accept backpressure unknown terminal status (#5464)

2026-07-30 04:38:30 +00:00

ecstore

feat: add opt-in hotpath profiling (#5488)

2026-07-31 01:49:19 +08:00

extension-schema

chore(deps): localize workspace dependency features (#4888)

2026-07-16 03:55:27 +00:00

filemeta

feat: add opt-in hotpath profiling (#5488)

2026-07-31 01:49:19 +08:00

heal

chore(heal): enforce workspace lint policy (#5426)

2026-07-29 10:00:51 +00:00

iam

fix(iam): separate OIDC role and claim policies (#5493)

2026-07-30 23:53:06 +00:00

io-core

chore(deps): simplify dependency features (#4890)

2026-07-16 05:20:43 +00:00

io-metrics

fix(obs): label node-local metrics by server (#5465)

2026-07-30 04:57:22 +00:00

keystone

ci(keystone): inherit workspace lint policy (#5429)

2026-07-29 22:21:01 +08:00

kms

feat(kms): export local backend key material as sealed backup bundles

2026-07-31 10:12:33 +08:00

lifecycle

fix(lifecycle): reject invalid modification times (#5370)

2026-07-28 17:23:21 +08:00

lock

fix(lock): jitter distributed lock retries (#5113)

2026-07-25 20:26:37 +08:00

log-analyzer

fix(heal): report partial rename failures (#5355)

2026-07-28 17:37:02 +08:00

madmin

fix(scanner): report active first-cycle status (#5397)

2026-07-29 22:33:25 +08:00

notify

fix(notify): defer disabled bootstrap storage refresh (#5373)

2026-07-28 17:39:22 +00:00

object-capacity

perf(capacity): drop per-PUT global lock and per-disk allocation from write dirty-scope (#4933)

2026-07-17 08:29:38 +08:00

object-data-cache

fix(cache): harden object data cache coordination (#5004)

2026-07-18 14:37:10 +00:00

obs

fix(obs): label node-local metrics by server (#5465)

2026-07-30 04:57:22 +00:00

policy

feat(admin): add KMS key lifecycle endpoints and deletion reference gate (#5496)

2026-07-31 01:37:07 +00:00

protocols

fix(s3): correlate server-owned request IDs (#5433)

2026-07-29 23:50:59 +08:00

protos

fix(tiering): bind recovery to transaction metadata (#5409)

2026-07-29 18:44:44 +00:00

replication

fix(replication): make resync starts atomic (#5215)

2026-07-25 08:58:06 +08:00

rio

feat: add opt-in hotpath profiling (#5488)

2026-07-31 01:49:19 +08:00

rio-v2

refactor(sse): decouple ecstore and harden KMS lifecycle (#5435)

2026-07-30 12:39:25 +08:00

s3-ops

fix(s3-types): cover all removed events and fix scanner round-trip (#4512)

2026-07-09 01:07:06 +08:00

s3-types

fix(notify): emit noop event for missing deletes (#5381)

2026-07-28 17:05:10 +08:00

s3select-api

ci(s3select-api): inherit workspace lint policy (#5441)

2026-07-29 23:06:33 +08:00

s3select-query

ci(s3select-query): inherit workspace lint policy (#5443)

2026-07-29 23:31:11 +08:00

scanner

fix(scanner): persist portable usage cache keys (#5444)

2026-07-29 23:22:30 +00:00

security-governance

feat: add security governance policy contracts (#3271)

2026-06-08 02:42:03 +00:00

signer

Merge commit from fork

2026-07-27 00:22:50 +08:00

storage-api

fix(ecstore): prevent recursive delete after empty bucket scan (#5453)

2026-07-29 21:06:28 +00:00

targets

fix(s3): enforce SSE-C copy key validation (#5185)

2026-07-24 19:11:36 +08:00

test-utils

fix(scanner): require authoritative usage snapshots (#5333)

2026-07-28 07:29:57 +08:00

tls-runtime

chore(deps): tighten crate dependency features (#4896)

2026-07-16 06:55:52 +00:00

trusted-proxies

fix(notify): restore webhook HTTPS target initialization (#5060)

2026-07-20 19:55:07 +08:00

utils

refactor(sse): decouple ecstore and harden KMS lifecycle (#5435)

2026-07-30 12:39:25 +08:00

zip

chore(deps): localize workspace dependency features (#4888)

2026-07-16 03:55:27 +00:00

AGENTS.md

chore(docs): refresh agent docs, guard doc paths, archive plans (#4203)

2026-07-02 23:30:13 +08:00