e0474f3ce9
Built for the Beacon Android upload keystore: binary files outside the project root can now ride the encrypted store. - manifest: 'file <path>' (no keys; keys present = rejected loudly) - push: encrypts the file verbatim (age is binary-safe) - pull: restores next to target (atomic same-fs mv), mode 600, TOCTOU symlink recheck, divergent existing target backed up to .secrets-bak - _validate_external_target_path parameterized by type (basename restriction stays gradle-properties-only; $HOME/../symlink rails apply to both) - README/help/CLAUDE docs + 7 bats tests (133/133 pass)
1 line
8 B
Text
1 line
8 B
Text
0.3.0.0
|