feat(replica): redaction via dbt-masking manifests + postgresql_anonymizer#40

Open

passcod wants to merge 11 commits into

mainfrom

feat/replica-redaction

Commits on May 13, 2026

plan: replica redaction via dbt-masking manifests
passcod
committed
feat(replica): add redaction CRD spec and status fields
passcod
committed
feat(replica/redaction): add manifest parser, mask registry, and apply layer
passcod
committed
feat(restore/builders): mount postgresql_anonymizer image volume when redaction is set
passcod
committed
feat(replica): wire redaction step into reconcile + sweep gates
passcod
committed
docs(readme): document RedactionSpec field and redaction status fields
passcod
committed
test(redaction): end-to-end integration test for PG-18 redaction
passcod
committed
unplan: replica redaction via dbt-masking manifests
passcod
committed
refactor(redaction): stage anon onto restore PVC instead of an image volume
passcod
committed
refactor(redaction): drop PG-18 gate; install anon in the postgres container prelude
passcod
committed
fix(redaction): compose full names from fake_first_name + fake_last_name
passcod
committed