Encrypt synchronized Later plans at rest #1115

Merged
timmy merged 1 commits from timmy/1114-encrypt-later-state into main 2026-08-19 05:38:48 +00:00
Owner

Closes #1114

Encrypts account-scoped Later plans and conflict identities with authenticated private-state envelopes. Existing plaintext rows migrate atomically on read or duplicate/write replay without changing logical revisions. Wrong keys and cross-account ciphertext substitution fail closed.

TDD proof:

  • RED: encryption constructor behavior failed before implementation.
  • RED: legacy read migration failed before implementation.
  • RED: duplicate-write migration failed before implementation.
  • GREEN: pytest -q tests/test_later_store.py — 12 passed.
  • Full suite: pytest -q — 2121 passed, 8 skipped.
Closes #1114 Encrypts account-scoped Later plans and conflict identities with authenticated private-state envelopes. Existing plaintext rows migrate atomically on read or duplicate/write replay without changing logical revisions. Wrong keys and cross-account ciphertext substitution fail closed. TDD proof: - RED: encryption constructor behavior failed before implementation. - RED: legacy read migration failed before implementation. - RED: duplicate-write migration failed before implementation. - GREEN: `pytest -q tests/test_later_store.py` — 12 passed. - Full suite: `pytest -q` — 2121 passed, 8 skipped.
timmy added 1 commit 2026-08-19 05:32:42 +00:00
security: encrypt synchronized Later state (Closes #1114)
All checks were successful
CI / lint (pull_request) Successful in 2m43s
CI / build-release (pull_request) Successful in 7s
CI / browser-journey (pull_request) Successful in 2m51s
CI / release-candidate (pull_request) Has been skipped
f4d8d64b9d
timmy merged commit d054cd23ed into main 2026-08-19 05:38:48 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#1115
No description provided.