Encrypt authored-action idempotency ledger at rest #1123

2026-08-19T09:29:38Z

rockachopa commented

2026-08-19 09:29:38 +00:00

Encrypts authored-action request fingerprints and completed Gitea responses with AES-256-GCM envelopes authenticated to the operation key and field purpose. Legacy plaintext rows migrate atomically on first use; wrong keys and ciphertext substitution fail closed.

Tests:

pytest -q tests/test_idempotency_ledger.py tests/test_authored_idempotency.py (18 passed)
pytest tests/ -q (2137 passed, 8 skipped)

Closes #1122 Encrypts authored-action request fingerprints and completed Gitea responses with AES-256-GCM envelopes authenticated to the operation key and field purpose. Legacy plaintext rows migrate atomically on first use; wrong keys and ciphertext substitution fail closed. Tests: - `pytest -q tests/test_idempotency_ledger.py tests/test_authored_idempotency.py` (18 passed) - `pytest tests/ -q` (2137 passed, 8 skipped)

rockachopa added 1 commit 2026-08-19 09:29:39 +00:00

security: encrypt idempotency ledger at rest (Closes #1122 )

CI / lint (pull_request) Successful in 2m49s

Details

CI / build-release (pull_request) Successful in 5s

Details

CI / browser-journey (pull_request) Successful in 2m57s

Details

CI / release-candidate (pull_request) Has been skipped

Details

3822ec4536

rockachopa merged commit db85bfa5f9 into main

2026-08-19 09:35:56 +00:00

rockachopa referenced this issue from a commit

2026-08-19 09:35:56 +00:00

Merge pull request 'Encrypt authored-action idempotency ledger at rest' (#1123)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#1123