max / makenotwork
| 1 | -- SyncKit Groups: store each member's identity public key. |
| 2 | -- |
| 3 | -- Needed for non-interactive GCK rotation (p3-rotation): when a member is |
| 4 | -- removed, the admin mints a new GCK and re-seals it to the *remaining* members' |
| 5 | -- public keys without re-collecting them out of band. The key is non-secret |
| 6 | -- metadata (the server already knows group membership); it is never used to |
| 7 | -- decrypt anything server-side. Nullable so a membership row can predate its |
| 8 | -- pubkey; the client always sends it with the grant. Design: wiki |
| 9 | -- synckit-groups-design. |
| 10 | |
| 11 | sync_group_members ADD COLUMN IF NOT EXISTS member_pubkey TEXT; |
| 12 |