fix: drop null vault keys, cap snapshot restore size, isolate test globals

Vaults.add_keys and kv add skip null content keys instead of failing the batch; is_null_key moves to core.vault. A manifest snapshot restore has one 32 MiB inflate budget. Tests reset the speed limiter and config between runs.
This commit is contained in:
imSp4rky
2026-11-02 22:01:02 -07:00
parent c4677341c8
commit 3027592e31
19 changed files with 170 additions and 81 deletions
+2 -2
View File
@@ -36,8 +36,8 @@ key_vaults:
- A vault of `type: API` whose `name` contains `decrypt_labs` auto-fills its `token` from
[`decrypt_labs_api_key`](misc.md#external-api-keys) when not set inline. Vault `type` values are
case-sensitive module names.
- unshackle treats an all-zero content key (32 zeros) as "no key" everywhere and never
stores it.
- unshackle treats an empty or all-zero content key, of any length, as "no key" everywhere
and never stores it.
!!! note "Bad content keys"
A content key from a vault is proven by short FFmpeg decodes of the decrypted output,