All pull requests

Pull requests

• fix(python): address the review findings across the Python SDK stack

  #1635·yujiyokoo opened Nov 12, 2026Contributor·

  ·
  13

• feat(stack-kms): typed errors and payload checks for key vendor backends (CIP-5304)

  #1632·freshtonic opened Nov 12, 2026Contributor·2/8·

  ·
  2

• feat(cli): stash keyset create and rewrap for key vendor backends (CIP-5312)

  #1631·freshtonic opened Nov 12, 2026Contributor·

  ·
  3

• feat(go): key vendor backends through the encrypt guest (CIP-5311)

  #1630·freshtonic opened Nov 12, 2026Contributor·8/8·

  ·
  3

• feat(stack-kms-azure): Azure Key Vault and Managed HSM key vendor backend (CIP-5309)

  #1629·freshtonic opened Nov 12, 2026Contributor·7/8·

  ·
  3

• feat(stack-kms-gcp): Google Cloud KMS key vendor backend (CIP-5308)

  #1628·freshtonic opened Nov 12, 2026Contributor·6/8·

  ·
  3

• feat(stack-kms-vault): HashiCorp Vault Transit key vendor backend (CIP-5310)

  #1627·freshtonic opened Nov 12, 2026Contributor·5/8·

  ·
  3

• feat(stack-kms-aws): AWS KMS key vendor backend (CIP-5307)

  #1626·freshtonic opened Nov 12, 2026Contributor·4/8·

  ·
  3

• feat(stack-kms-vendor): keyset records, derived data keys and the static key backend (CIP-5306)

  #1625·freshtonic opened Nov 12, 2026Contributor·3/8·

  ·
  3

• docs(stack-encrypt): key vendor backend design (CIP-5203)

  #1624·freshtonic opened Nov 12, 2026Contributor·1/8·

  ·
  13

• feat(python): SQLAlchemy layer, order and match queries, and row-level encrypt and decrypt

  #1622·yujiyokoo opened Nov 12, 2026Contributor·

  ·
  14

• feat(python): add a customer directory example

  #1621·yujiyokoo opened Nov 12, 2026Contributor·16/16·

  ·
  13

• docs(migration): make the Protect-to-Stack conversion guide actionable

  #1620·tobyhede opened Nov 11, 2026Contributor·

  ·
  14

• feat(e2e): add an isolated Claude migration adapter

  #1619·tobyhede opened Nov 11, 2026Contributor·7/7·

  ·
  14

• fix(stack-auth): cap the /api/authorise expiry and wipe serialised token copies

  #1617·cipherstash-agent opened Nov 11, 2026Contributor·2/2·

  ·
  18

• feat(e2e): run Postgres v2 migrations through the isolated harness

  #1614·tobyhede opened Nov 11, 2026Contributor·6/7·

  ·
  28

• refactor(stack-encrypt)!: remove target::legacy

  #1613·coderdan opened Nov 10, 2026Contributor·

  ·
  10

• refactor(stack-encrypt)!: hide ExpectedContext from the API

  #1612·coderdan opened Nov 10, 2026Contributor·

  ·
  9

• fix(stack-encrypt)!: an order index on bytes is refused

  #1611·coderdan opened Nov 10, 2026Contributor·

  ·
  23

• refactor(stack-encrypt)!: replace CipherScope and dynamic::Scope with one CipherRef

  #1610·coderdan opened Nov 10, 2026Contributor·

  ·
  30

• chore(python): lock the test dependencies with uv.lockj

  #1582·yujiyokoo opened Nov 9, 2026Contributor·15/16·

  ·
  8

• feat(e2e): verify the migration Oracle with reference and broken applications

  #1581·tobyhede opened Nov 9, 2026Contributor·5/7·

  ·
  1

  12

• feat(e2e): detect legacy ciphertext rewrites in migration Runs

  #1580·tobyhede opened Nov 9, 2026Contributor·4/7·

  ·
  1

  17

• feat(e2e): scaffold migration harness runs and isolation probes

  #1576·tobyhede opened Nov 9, 2026Contributor·3/7·

  ·
  1

  21

• fix(stack-kms)!: only trust a CipherStash-hosted ZeroKMS from a token claim

  #1546·cipherstash-agent opened Nov 6, 2026Contributor·

  ·
  28