Skip to content

Oracle: add key provider health and rotation readiness #583

@Otaiki1

Description

@Otaiki1

Build location

Work primarily in oracle/src/keys. Keep related tests/docs beside that package unless this issue explicitly calls for a cross-package update.

Why this matters

The oracle supports local/HSM/KMS-like key management and should report health and rotation readiness without exposing secrets.

What to build

  • Add health checks for configured key provider.
  • Expose active key ID/fingerprint safely.
  • Document rotation workflow and failure states.

Acceptance criteria

  • Tests cover healthy provider, unavailable provider, and permission failure.
  • Health output never includes private key material.

Suggested verification

cd oracle && npm run lint && npm run test && npm run build

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions