Skip to content

Latest commit

 

History

History
34 lines (28 loc) · 1.18 KB

File metadata and controls

34 lines (28 loc) · 1.18 KB

Instructions for Agents Working in pkg/datacrypto/

Read the repository-root AGENTS.md, cli/AGENTS.md, and authling/AGENTS.md before changing this shared module. Also follow ADR-060.

Boundary

  • Keep production code application-neutral.
  • This module owns only random 256-bit key generation, XChaCha20-Poly1305 authenticated encryption, and authenticated wrapping of 256-bit keys.
  • Applications own associated-data construction and domain separation, key identities and hierarchies, envelope serialization, storage, KMS integration, caching, rotation, and erasure policy.
  • Do not import Chatto or Authling packages or encode either product's identifiers, formats, or policies.
  • The module is independently versioned but pre-1.0 and has no API stability promise yet.
  • The complete module is licensed under Apache-2.0. Keep its source, tests, documentation, and standalone license metadata inside that permissive boundary.

Verification

Run:

mise test-datacrypto
(cd authling && mise test)
mise test-cli
mise license-check