feat: request-time data encryption - #349

Merged

infiniteregrets merged 132 commits into

mainfrom

Apr 8, 2026

Commits on Mar 23, 2026

feat: request time encryption
infiniteregrets
committed
af1f22e
.
infiniteregrets
committed
0798e16
.
infiniteregrets
committed
f44c37b
.
infiniteregrets
committed
d6cb24b
.
infiniteregrets
committed
e11c23f
.
infiniteregrets
committed
17360b4
.
infiniteregrets
committed
553cf51
.
infiniteregrets
committed
080b82d
.
infiniteregrets
committed
cbe7ae8
.
infiniteregrets
committed
a065eab
.
infiniteregrets
committed
8f755a8
.
infiniteregrets
committed
94eb362
.
infiniteregrets
committed
9955bbb
.
infiniteregrets
committed
176e347
.
infiniteregrets
committed
e2a59a8
.
infiniteregrets
committed
0c40ff8
.
infiniteregrets
committed
8f90bff
..
infiniteregrets
committed
a815b31
.
infiniteregrets
committed
43fdc54
.
infiniteregrets
committed
41ed54f

Commits on Mar 24, 2026

Merge branch 'main' into m/encryption
infiniteregrets
authored
620ffb4
.
infiniteregrets
committed
7ebd7c5
.
infiniteregrets
committed
327c709

Commits on Mar 26, 2026

refactor(encryption): use stream_id as AAD, move encryption to handler layer

infiniteregrets
and
claude
committed
4a42619
chore: remove backend-level encryption tests

infiniteregrets
and
claude
committed
425e0e1
chore: simplify encryption context

infiniteregrets
and
claude
committed
1dcf22b
fix: restore Debug derive on AppendPermit

infiniteregrets
and
claude
committed
6bad4c7
fix(cli): error when --encryption-algorithm is provided without a key

infiniteregrets
and
claude
committed
edd9088
,
infiniteregrets
committed
5f917c1
fix(cli): add encryption support to tail command

infiniteregrets
and
claude
committed
82dd6b4
refactor(cli): remove --encryption-algorithm from read/tail commands

infiniteregrets
and
claude
committed
84eadc4
refactor(cli): enforce --encryption-algorithm requires key via clap group

infiniteregrets
and
claude
committed
80072b2

Commits on Mar 27, 2026

better
infiniteregrets
committed
a46841e
.
infiniteregrets
committed
820efcb
refactor: make encryption algorithm optional in directives

infiniteregrets
and
claude
committed
dac2431
.
infiniteregrets
committed
ec37e4e
chore: deduplicate resolve_encryption/resolve_decryption, rename test helpers

infiniteregrets
and
claude
committed
4f7b9b1

Commits on Mar 30, 2026

Merge branch 'main' into m/encryption
infiniteregrets
authored
b2390b7
sbcr
infiniteregrets
committed
2967e10
.
infiniteregrets
committed
ef57351
.
infiniteregrets
committed
961cd75

Commits on Mar 31, 2026

sort
infiniteregrets
committed
36d8109
Merge branch 'main' into m/encryption
infiniteregrets
authored
f79d655
.
infiniteregrets
committed
9fdaf22
.
infiniteregrets
committed
4f89d78

Commits on Apr 3, 2026

fix: remove encryption attestation plumbing
shikhar
committed
d44dea6

Commits on Apr 4, 2026

checkpoint
shikhar
committed
3da2f3e
t
shikhar
committed
e4c47e6
c
shikhar
committed
e5b1a47
t
shikhar
committed
bc1d80f
l
shikhar
committed
6740245

Commits on Apr 5, 2026

tt
shikhar
committed
d3fb3d7
cli
shikhar
committed
01008c9
refactor: inline cli encryption resolution
shikhar
committed
b766e7f
refactor: simplify cli encryption parsing
shikhar
committed
4438e21
refactor: reduce sequenced alias noise
shikhar
committed
74767a4
refactor: reduce type annotation noise
shikhar
committed
2323a31
refactor: clarify encrypted record suite id length
shikhar
committed
dd47924
refactor: move encryption header parsing into stream extractors
shikhar
committed
db198e7
refactor: include encryption in append request debug output
shikhar
committed
852f8fa
refactor: consolidate encryption modules
shikhar
committed
3fe630e
refactor: tighten encrypted record framing
shikhar
committed
73f856d
h
shikhar
committed
eedab91
refactor: harden plain encryption handling
shikhar
committed
30611d1
c
shikhar
committed
3ecf919
refactor: tighten encrypted record internals
shikhar
committed
84d3092
refactor: rename record encryption errors
shikhar
committed
6ea5f1e

Commits on Apr 6, 2026

Merge branch 'main' into m/encryption
shikhar
committed
c87a052
t
shikhar
committed
d843e90
refactor(record): decode stored bytes outside batcher
shikhar
committed
73e3359
refactor(record): tighten decode iterator aad and metering
shikhar
committed
044dace
test(record): expand batcher and iterator coverage
shikhar
committed
551de3d
refactor(common): use thiserror From for record iterator errors
shikhar
committed
76aa65e
fix(common): accept case-insensitive encryption algorithms
shikhar
committed
e1b2ac4
refactor: tighten encryption record hygiene
shikhar
committed
7ff2812
h
shikhar
committed
a60900a
cp0
shikhar
committed
3aac60b
a
shikhar
committed
012ddc3
a
shikhar
committed
6e5d763
cu
shikhar
committed
d830a9c
compile
shikhar
committed
43c4fac
cu
shikhar
committed
12bc4f0
u
shikhar
committed
e4576bb
test
shikhar
committed
1403885
refactor: drop unrelated sdk and test cleanup from encryption PR
shikhar
committed
ccc2a00
refactor(record): tighten metered wrapper boundary
shikhar
committed
db6afa3
Merge remote-tracking branch 'origin/main' into m/encryption
shikhar
committed
2298aa1
refactor: make record encryption infallible
shikhar
committed
e10d480
g
shikhar
committed
0f2ad24
lc
shikhar
committed
b1eb689

Commits on Apr 7, 2026

refactor(lite): inline stream_id aad helper
shikhar
committed
9e06132
refactor(lite): expose StreamId for aad
shikhar
committed
f41f5cd
refactor(lite): make stream_id module private
shikhar
committed
5960b2b
pos
shikhar
committed
29c5165
refactor(common): type metered size decrypt errors
shikhar
committed
2be7e10
refactor(common): tighten record decryption errors
shikhar
committed
06d793a
simp
shikhar
committed
9af9db9
c
shikhar
committed
d3779ef
refactor(common): unify record decode errors
shikhar
committed
5cb2e8a
cu
shikhar
committed
5f5981c
ok
shikhar
committed
f98b142
m
shikhar
committed
ee7e7d4
v
shikhar
committed
f718486
nom
shikhar
committed
f82ffe3
com
shikhar
committed
67a27ed
i
shikhar
committed
4d8232c
ct
shikhar
committed
de3dddd
t
shikhar
committed
8c0a736
y
shikhar
committed
9311bc1
cu
shikhar
committed
0f7d39c
refactor: move encryption to record-level APIs
shikhar
committed
0d54d22
metering
shikhar
committed
fa2f121
oapi
shikhar
committed
a1c8a24
lt
shikhar
committed
9938dc5
m
shikhar
committed
0d68d09
h
shikhar
committed
b280d08
t
shikhar
committed
8a44a89
cu
shikhar
committed
beb1522
cu
shikhar
committed
d8a7e2b
cu
shikhar
committed
83eafb8
tn
shikhar
committed
5dade6e
red
shikhar
committed
0c7c856
c
shikhar
committed
946947a
noise
shikhar
committed
f4232d4
cu
shikhar
committed
1ad73e7
unnec
shikhar
committed
5b63b20
bad test
shikhar
committed
b4d9fe3
cu
shikhar
committed
4adb366
test
shikhar
committed
78e7e09
cug
shikhar
committed
7f0f83c
test: reduce encryption test ceremony
shikhar
committed
f3a2911
test: consolidate encryption payload roundtrip cases
shikhar
committed
e55fd60