# bootstrap/ — Flux + SOPS age-key bootstrap (Phase 1 T-1.4)

sops/: age key generation + Flux SOPS decryption wiring (private key NEVER committed).
flux/: `flux bootstrap` config pointing at clusters/dev. Spec: ADR-0004, ADR-0007.