How I built a minimal-knowledge sync for WorkLedger
Summary
A technical deep-dive into a local-first sync for WorkLedger using domain separation to keep the server blind to the sync ID. It details token derivation, key management, encryption of entries, and a server architecture that supports multi-device synchronization without key exchange.