feat(config): audit persisted config mutations (source, fields, redacted before/after) - #2351

Draft

harryzhou2000 wants to merge 8 commits into

lidge-jun:devfrom

harryzhou2000:feat/config-mutation-audit

Commits on Aug 23, 2026

feat(config): audit persisted config mutations (source, fields, redacted before/after)
harryzhou2000
committed
b292a01
fix(config): bound audit retention offset; drop auth-surface source labels
harryzhou2000
committed
d0b5bb8
fix(config): audit exact persisted bytes, redacted path segments, principal-gated reads
harryzhou2000
committed
a5dfb38
fix(config): unique redacted audit labels; write-ahead recovery for interrupted audit rows
harryzhou2000
committed
f0ad878
fix(config): fsync pending marker; defer marker deletion until post-commit; raw-document audit baseline
harryzhou2000
committed
3e7ef46
fix(config): commit recovered audit markers in a separate reconciliation transaction
harryzhou2000
committed
850d497
fix(config): redact apiKeys admission keys, load-bearing durability regression, claude-code source label
harryzhou2000
committed
6635da1
fix(config): context-aware apiKeys redaction for degraded rows; label key lifecycle routes; drop dormant unredacted insert helper
harryzhou2000
committed
de16cb4