From cf6d19d09d26f53aaca6ce1ea2f3798950dc401f Mon Sep 17 00:00:00 2001 From: Joseph Doherty Date: Fri, 7 Aug 2026 05:56:09 -0400 Subject: [PATCH] docs(secrets): add wire-evolution policy header to secrets_hub.proto (review follow-up) Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1 --- .../Protos/secrets_hub.proto | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Replicator.Grpc/Protos/secrets_hub.proto b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Replicator.Grpc/Protos/secrets_hub.proto index 7d7f84b..6354c0c 100644 --- a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Replicator.Grpc/Protos/secrets_hub.proto +++ b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Replicator.Grpc/Protos/secrets_hub.proto @@ -4,6 +4,12 @@ package zb.mom.ww.secrets.hub.v1; option csharp_namespace = "ZB.MOM.WW.Secrets.Replicator.Grpc.V1"; +// Wire-compatibility policy: this contract evolves additively only. Never +// renumber or repurpose an existing field number. When a field is removed, add +// a `reserved` range (and `reserved` name) covering it in the same change so a +// future editor cannot accidentally reuse the retired tag. There are no +// `reserved` declarations today because no field has ever been removed. + // The central-hosted secrets hub, as seen by a site node. // // PULL-ONLY BY CONSTRUCTION. This service mirrors exactly the read half of