0125634400
The Secrets:Replication _comment claimed the feature was KNOWN NON-FUNCTIONAL against ZB.MOM.WW.Secrets.Replicator.AkkaDotNet 0.2.0 and said "do not enable until the library is fixed". That has been false since 0.2.2 — 0.2.1 fixed the shadowed ISecretReplicator registration and 0.2.2 the hosted-process DI deadlock — and the 2026-08-07 three-mesh live gate proved replication works (PASS 4/4, docs/plans/2026-08-07-secrets-pair-local-live-gate.md). Replaced with the truthful operator-facing note: functional since 0.2.2, still default-off, PAIR-LOCAL in scope (mesh Phase 6 gives each application cluster its own 2-node mesh, so a secret converges within its pair and nowhere else), same KEK required per pair, and rewrap-all runs per node because re-wraps do not replicate. Comment-only; no behaviour change. Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1