Run owner migrations in a dedicated maintenance process, verify shared bytes, and export the original signing key only after complete eligibility. Validate with real PostgreSQL/S3 and the bundled executable.
Co-Authored-By: Paperclip <noreply@paperclip.ing>