ReferenceSequence diagrams
Encryption key rotation (zero-downtime)
How ENCRYPTION_KEY is rotated without losing access to encrypted settings
What can go wrong
| Issue | Mitigation |
|---|---|
| Migration interrupted | Re-run, idempotent |
| Promote before migration | Roll back ENCRYPTION_KEY to old, re-run migration |
| Lost old key mid-rotation | Restore from backup before rotation start |