sc/sgard
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Step 31: Proto + sync update for targeting.

Browse Source 
Added only/never repeated string fields to ManifestEntry proto.
Updated convert.go for round-trip. Targeting test in convert_test.go.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kyle Isom
2026-03-24 22:55:02 -07:00
parent 60c0c50acb
commit 2ff9fe2f50
5 changed files with 78 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
proto/sgard/v1/sgard.proto
View File

@@ -17,6 +17,8 @@ message ManifestEntry {
string plaintext_hash = 7; // SHA-256 of plaintext (encrypted entries only)
bool encrypted = 8;
bool locked = 9; // repo-authoritative; restore always overwrites
repeated string only = 10; // per-machine targeting: only apply on matching
repeated string never = 11; // per-machine targeting: never apply on matching
}
// KekSlot describes a single KEK source for unwrapping the DEK.