# Port provenance

Imported from KNEL/TSYS-CA@master (2026-09-04) per OQ2 ruling (#769). The two
*SECRETS.inc files were excluded — they contained real Nitrokey HSM PINs in
the public source repo (security ticket #783, founder rotation decision
pending). Legacy repo now carries a redirect README.