pub const CONTROL_DIR: &str = "control.git";Expand description
Legacy, and kept. The bare repository that held the catalog and the
identity table until the certificate-identity plan moved them to CONTROL_DB, and the sealed
SSH host key until 2026-08-10 moved that there too.
It is still named, and still created, for two reasons that have nothing to
do with git: gunnar_core::Kek::for_control_dir keeps secrets.kek in it
— a file beside the data, deliberately not a row inside it — and
gunnar_core::legacy_secret_log looks under it for the Arrow log an
existing appliance’s host key is in. No storage engine opens it any more.