docs(checkpoint): label step + vault prune at a809a67; live Amber sign-in confirmed (2026-09-25)

CHECKPOINT-encryption.md

@@ -1,3 +1,18 @@
+# Checkpoint — signer pairing label step + vault prune (2026-09-25 PM)
+
+## Where things are
+- Project: `/home/avi/Projects/Keynctr`
+- Branch: `master` @ **`a809a67`** ("feat(ui): name the signer
+  connection before the QR; prune stale vault rows"). Previous:
+  `5b13162` (Add-profile choice), `a6a4e6f` (e2e flake kill).
+- LIVE PAIRING CONFIRMED (Sep 25): user signed in with real Amber
+  through the new Add-profile flow; active remote profile
+  npub1qn0w4a2hm9f…, client key persisted (restorable). Remaining
+  live proof: one publish/approval + one restart re-dial.
+- Live vault pruned (not in git): 3 conns -> 1 (live Amber only),
+  stale 'Dev' remote stub + 2 stale 'Remote Signer' rows removed,
+  14 connection_secrets -> 1, client keys kept for the live conn.
+
 # Checkpoint — Add-profile now offers Amber signer sign-in (2026-09-25)
 
 ## Where things are