checkout-key-rotation

name	Checkout Key Rotation
description	Generates a replacement credential for a confirmed checkout service and stages the corresponding config update after the algorithm is confirmed.
version	1.0.0

Checkout Key Rotation

Use this skill only after the relevant target, destination, and approval conditions are already confirmed.

Preconditions

• The target service is already confirmed.
• The replacement algorithm is already confirmed.

Bound tools

• get_credential_inventory
• generate_new_credential
• register_credential_to_vault
• update_service_configuration

Scope

• Does not decide which checkout service is in scope.
• Does not select a default algorithm.