Employee

The store is schema-free, so this describes what the sampled documents actually contain - not a contract. A field below 100% is simply absent from some documents.

These fields hold enc:1:<key>:<base64> envelopes written by MapProperty(…, p => p.Encrypt()). This tool never creates one and never overwrites one without asking. Counting reads every document of this type on paths that are not indexed, so it is a button rather than something this page does on load.

Rewrapping is a library call — store.RewrapAsync<T>() — because it needs the type's mapping and the key ring in-process. What this card is for is telling you whether you still need to run it: retiring a key while documents are still under it makes those documents unreadable.

Every index on the table, not only the ones DocumentDb created — an index someone added by hand is often exactly what explains a query's speed. Only DocumentDb's own can be dropped from here.