Add README and LICENSE (GPL-3.0-or-later) #7

Merged
vnprc merged 1 commit from agent/license-secrets into master 2026-07-17 19:16:26 +01:00
Member

Add a README and a GPL-3.0-or-later LICENSE, implementing allod/strategy#11.

README.md documents the repo's purpose (the consumer-owned identity, credential, and encrypted-secrets template), its exported flake outputs, the age/agenix recipient model, the layout of the encrypted blobs and git policy data, and how profiles consumes it — matching the house style of the existing allod READMEs. LICENSE opens with a short copyright and SPDX notice (SPDX-License-Identifier: GPL-3.0-or-later) followed by the verbatim GNU General Public License version 3 text.

Refs allod/strategy#11

Risk

Adds two top-level documentation/metadata files (README.md, LICENSE); no code or secret material changes. The README is public-facing.

Validation

The README was written to contain no plaintext secrets or personal identifiers: it references .age blobs by name and purpose only and describes recipient metadata and public keys (public by nature). A leak sweep confirmed all .age files are ciphertext (age-encryption.org/v1 headers), the only on-disk key material is .pub public keys, and identifiers are synthetic (example.com / RFC 5737 documentation ranges). LICENSE contains the unmodified GPLv3 body.

Add a README and a GPL-3.0-or-later LICENSE, implementing allod/strategy#11. README.md documents the repo's purpose (the consumer-owned identity, credential, and encrypted-secrets template), its exported flake outputs, the age/agenix recipient model, the layout of the encrypted blobs and git policy data, and how `profiles` consumes it — matching the house style of the existing allod READMEs. LICENSE opens with a short copyright and SPDX notice (SPDX-License-Identifier: GPL-3.0-or-later) followed by the verbatim GNU General Public License version 3 text. Refs allod/strategy#11 ## Risk Adds two top-level documentation/metadata files (README.md, LICENSE); no code or secret material changes. The README is public-facing. ## Validation The README was written to contain no plaintext secrets or personal identifiers: it references `.age` blobs by name and purpose only and describes recipient metadata and public keys (public by nature). A leak sweep confirmed all `.age` files are ciphertext (age-encryption.org/v1 headers), the only on-disk key material is `.pub` public keys, and identifiers are synthetic (example.com / RFC 5737 documentation ranges). LICENSE contains the unmodified GPLv3 body.
vnprc approved these changes 2026-07-17 19:16:20 +01:00
vnprc merged commit e91e89723e into master 2026-07-17 19:16:26 +01:00
vnprc deleted branch agent/license-secrets 2026-07-17 19:16:26 +01:00
Sign in to join this conversation.
No description provided.