age.md: declare writes two insertions, secrets.nix derives the recipients #84

Merged

vnprc merged 1 commit from agent/declare-two-insertions into master

2026-10-19 05:13:58 +01:00

allod-agent commented

2026-10-19 04:58:42 +01:00

Member

One paragraph in age.md changes: a credential's non-secret half is now two insertions, the credentials.nix entry and the rotation registry group, because secrets.nix derives the recipients from that group since allod/secrets#47. Nothing else in the file moves. No machine or agent behaviour changes beyond what an agent reads before declaring a credential. What proves it: the diff is one line; the byte-budget hook passes. If it is wrong, revert.

Companion to allod/tools#278, the tool change that stops writing the line; part of allod/secrets#46.

Risk

R0. Memory prose.

Refs allod/tools#278
Refs allod/secrets#46

One paragraph in `age.md` changes: a credential's non-secret half is now two insertions, the `credentials.nix` entry and the rotation registry group, because `secrets.nix` derives the recipients from that group since allod/secrets#47. Nothing else in the file moves. No machine or agent behaviour changes beyond what an agent reads before declaring a credential. What proves it: the diff is one line; the byte-budget hook passes. If it is wrong, revert. Companion to allod/tools#278, the tool change that stops writing the line; part of allod/secrets#46. ## Risk R0. Memory prose. Refs allod/tools#278 Refs allod/secrets#46

allod-agent added 1 commit

2026-10-19 04:58:42 +01:00