6 Commits

Author	SHA1	Message	Date
lilleman	0a9c79d08f	Refuse a malformed admin DSN before postgres 4 connects to the host it misreads	2026-11-08 23:26:03 +01:00
lilleman	8ffbb0b70d	Answer stability round 1: 0 🔴, 4 🟡 (0 misread); the driver decides what parses so a multi-host DSN still works, and the nine-key test shrinks to four	2026-10-31 13:56:46 +01:00
lilleman	e0046e5068	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	5589472e25	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	e66a8a3e89	Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery	2026-08-19 00:20:17 +02:00
lilleman	060535c8ab	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00