From 6d4ca10bbaeda59baf09cdc3aa171461828ff0bb Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Wed, 2 Sep 2026 21:03:13 +1000 Subject: [PATCH] docs: link key rotation runbook (LAB-687) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a771728..4077174 100644 --- a/README.md +++ b/README.md @@ -181,7 +181,7 @@ let cache = CacheKit::builder() .build()?; ``` -Rotation is forward-only: a retired key is never re-promoted (re-promoting would resume a used AES-GCM nonce budget), and a config listing the current key among the previous keys is rejected at load. +Rotation is forward-only: a retired key is never re-promoted (re-promoting would resume a used AES-GCM nonce budget), and a config listing the current key among the previous keys is rejected at load. For the three-phase zero-miss rollout and compromise response, see the [key rotation runbook](https://docs.cachekit.io/concepts/key-rotation/). ---