docs(handbook): frame the classical→post-quantum live migration (#110) #208

Merged

Cordy merged 3 commits from docs-pq-migration into main

2026-08-13 02:03:52 +00:00

Cordy commented

2026-08-13 02:03:39 +00:00

Owner

Adds one customer-facing framing paragraph to the Post-quantum mode section of docs/handbook/encryption.md, right before the existing "Facts to know" list.

Makes explicit what the surrounding bullets only imply: instances are classical by default, so the common real-world path is to migrate a running, populated instance to post-quantum later — and that migration is live and lossless (classical key retained in recoveryIdentityLegacy, upgrade-on-touch, new writes PQ, safe rollback). Starting classical, by choice or by oversight, is never a dead end. Confirmed end-to-end by the #110 sovereignty proof (pre-migration object opens with the classical key; post-migration object only with the hybrid).

Non-redundant: it frames and points to the existing Migration is automatic / Rollback is safe notes and the migration checklist rather than restating them. Product-neutral. Spliced in by a self-removed one-shot workflow; existing content untouched.

Adds one customer-facing framing paragraph to the **Post-quantum mode** section of `docs/handbook/encryption.md`, right before the existing "Facts to know" list. Makes explicit what the surrounding bullets only imply: instances are classical by default, so the common real-world path is to **migrate a running, populated instance to post-quantum later** — and that migration is live and lossless (classical key retained in `recoveryIdentityLegacy`, upgrade-on-touch, new writes PQ, safe rollback). Starting classical, by choice or by oversight, is never a dead end. Confirmed end-to-end by the #110 sovereignty proof (pre-migration object opens with the classical key; post-migration object only with the hybrid). Non-redundant: it frames and points to the existing *Migration is automatic* / *Rollback is safe* notes and the migration checklist rather than restating them. Product-neutral. Spliced in by a self-removed one-shot workflow; existing content untouched.

Cordy added 3 commits

2026-08-13 02:03:40 +00:00