chore(deploy): add railiance handoff guardrails [skip ci]

2026-06-14 16:47:24 +02:00
parent fde5525170
commit 333fbcc237
10 changed files with 279 additions and 74 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -0,0 +1,8 @@
+# SOPS encryption policy for inter-hub production handoff files.
+# Encrypt any file ending in .sops.yaml with the shared Railiance age recipient.
+
+creation_rules:
+  - path_regex: \.sops\.yaml$
+    key_groups:
+      - age:
+          - age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4