No description
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Damián Búho
99fba3e9e8
The SECURITY.md bridge read the key from `identity.gpg-key` in the per-user config at ~/.config/projectfile/cli.yaml. m6e runs the tool with `prefer-local: true`, so a host run saw that file and rendered the GPG block while the container run saw no config and rendered without it — 135 tracked SECURITY.md that no regeneration could bring in sync. A value a generated file depends on belongs in the projectfile chain, where every consumer resolves the same bytes. This fragment already owns the identity, so it owns the key. The messaging key is the one a reporter encrypts to; `handles.gpg-key` stays as the human-readable record, since no bridge reads it (projectfile's Person has no gpg-key slot). |
||
| include.yaml | ||