colineonset

Public

Onset: version control where nobody waits and nothing gets lost. The on command, its core and onset-server.

Sign in to fork

colineonset

Public

Onset: version control where nobody waits and nothing gets lost. The on command, its core and onset-server.

Sign in to fork

feat(vcs): packs in R2 are encrypted at rest

Radin committed …

Author: Radin · radin@coline.appOct 28, 2026 at 18:42
Committer: Radin · radin@coline.appOct 28, 2026 at 18:57
Parents: db10673815e8

feat(vcs): packs in R2 are encrypted at rest

AES-CTR under a per-project key derived from the Worker secret
VCS_DATA_KEY, the counter the byte offset, so ranges still read; object
IDs still catch any changed byte. Packs from before are written again
encrypted as each project is used, their plain copies kept 31 days for
rollbacks.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 file changed+32−1

← Back to history