From a85f7528b4a4987eaa7c41bd3ac0368e1c9487b9 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Sat, 5 Sep 2026 11:25:47 +1000
Subject: [PATCH] docs: note the plan pipeline doubles as an encapi conformance
 check

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 1ee3ac3..d58f149 100644
--- a/README.md
+++ b/README.md
@@ -58,3 +58,6 @@ to Vault via kubernetes auth (`terraform-enc` ServiceAccount). Locally:
 make plan    # approle auth by default (needs env with VAULT_ROLEID)
 make apply
 ```
+
+The plan pipeline doubles as a live conformance check of the encapi API: a
+no-op plan proves the deployed encapi still serves reads correctly.
-- 
2.47.3