age.md: a credential lands in two halves #52

Merged

vnprc merged 1 commit from agent/allod-secret-landing into master

2026-09-11 02:03:15 +01:00

allod-agent commented

2026-09-11 00:16:35 +01:00

Member

The age workflow note now describes how a credential lands once allod/tools#182 is in: an agent's PR declares the non-secret half in pending, and the host runs allod secret create <name> to encrypt, activate, check, commit and push. Nothing about running machines changes; this is memory text. What proves it: the described behavior is what allod/secrets#19, allod/tools#195 and allod/nexus#50 implement and test. If those do not merge, revert this.

Refs allod/tools#182. Merge after the three implementation PRs, since until then the text describes a command that does not exist yet. The private save-encrypted-credential skill retires by hand at the same time; its paste-safe relay rules already live in agent-behavior.md, so nothing moves.

The age workflow note now describes how a credential lands once allod/tools#182 is in: an agent's PR declares the non-secret half in `pending`, and the host runs `allod secret create <name>` to encrypt, activate, check, commit and push. Nothing about running machines changes; this is memory text. What proves it: the described behavior is what allod/secrets#19, allod/tools#195 and allod/nexus#50 implement and test. If those do not merge, revert this. Refs allod/tools#182. Merge after the three implementation PRs, since until then the text describes a command that does not exist yet. The private `save-encrypted-credential` skill retires by hand at the same time; its paste-safe relay rules already live in `agent-behavior.md`, so nothing moves.

allod-agent added 1 commit

2026-09-11 00:16:36 +01:00