fix(auth): fail closed on the public dev encryption key, add versioned ciphertext - #77

Closed

hasitpbhatt wants to merge 5 commits into

Continuum-AI-Corp:mainfrom

hasitpbhatt:fix/encryption-fail-closed

Commits on Aug 21, 2026

fix(keys): block restricted API keys from minting or managing other keys
hasitpbhatt
committed
f6ca9b1
feat(budget): enforce budget_limit_cents on the chat path and allow provisioning restricted keys
hasitpbhatt
committed
76f098f
fix(keys): scope key list and revoke to the caller's workspace
hasitpbhatt
committed
9240492
fix(auth): fail closed on the public dev encryption key and version ciphertext blobs
hasitpbhatt
committed
6096169
fix(auth): fail-closed encryption guard, live-row count, honor ORCA_ALLOW_INSECURE_DEV_KEY from .env
hasitpbhatt
committed
e547d71