Add an encrypted variant: smoke_enc.hdb decrypted to tmpfs

Exercises the pass-2 path end to end — key lookup, decrypt into tmpfs rather than the on-disk cache, results written into tmpfs and returned as an encrypted .hrb the server stores without a key. The .hek stays out of the repo.
2026-08-15 10:29:53 +02:00
parent 40b46d2099
commit fd0273f9dd
3 changed files with 95 additions and 0 deletions
@@ -17,3 +17,6 @@ __pycache__/
 *.py[cod]
 .venv/
 *.env
+
+# Keys never enter the repo.
+*.hek