The Task 2 reviewer rewired the model to Laravel's APP_KEY-based Crypt
facade and every test stayed green. Laravel's encrypter is a container
singleton resolved once from app.key, so config()->set('app.key') never
rebuilds it and the rotation the test performed was invisible.
Replaced with a positive proof — rotating SECRETS_KEY must break
decryption — plus the APP_KEY case with forgetInstance(), which is what
makes that direction mean anything.
|
||
|---|---|---|
| .. | ||
| design | ||
| handoffs | ||
| specs | ||
| superpowers | ||
| deployment.md | ||
| handoff-plan-catalogue.md | ||
| monitoring-uptime-kuma.md | ||
| wireguard-hub.md | ||