Read the repository-root AGENTS.md,
cli/AGENTS.md, and
authling/AGENTS.md before changing this shared
module. Also follow
ADR-060.
- Keep production code application-neutral.
- This module owns only random 256-bit key generation, XChaCha20-Poly1305 authenticated encryption, and authenticated wrapping of 256-bit keys.
- Applications own associated-data construction and domain separation, key identities and hierarchies, envelope serialization, storage, KMS integration, caching, rotation, and erasure policy.
- Do not import Chatto or Authling packages or encode either product's identifiers, formats, or policies.
- The module is independently versioned but pre-1.0 and has no API stability promise yet.
- The complete module is licensed under Apache-2.0. Keep its source, tests, documentation, and standalone license metadata inside that permissive boundary.
Run:
mise test-datacrypto
(cd authling && mise test)
mise test-cli
mise license-check