# Story: Rotate storage account keys automatically
Epic: Platform hardening
Tags: infrastructure, security

Storage account keys rotate on a schedule so nobody has to remember to do it.

### Notes
Rotation must not cause downtime for the API.

## Acceptance Criteria
- Keys rotate every 90 days
- The previous key stays valid for 24 hours after rotation
- A failed rotation alerts the on-call channel

# Story: Show build status on the team dashboard
Epic: Developer experience
Tags: devops

The dashboard shows the latest pipeline result for each service.

## Acceptance Criteria
- [ ] Each service shows passed, failed, or running
- [ ] Clicking a service opens its latest pipeline run

# Story: Spike - compare log retention options
Tags: devops, research

Time-boxed investigation. Write up the options and their costs. Acceptance
criteria come after the spike, so this story intentionally has none.