Two OpenBao Services on One Host Are Still Not High Availability
Separating the main secret authority from the Transit seal service improves trust boundaries, but both still share the same physical host failure domain.
Transit
Static Auto-Unseal Is a Temporary Root of Trust, Not HA
The same-host seal service removes manual unseal entry, but its static key remains a temporary bootstrap root of trust on the same failure domain.