BaaRai fcee6af45e secrets: encrypt the evidence snapshot heads at rest ...

traffic_evidence_snapshots.req_head and resp_head join the secret column registry (AAD per column, enc:v1:). Heads are sealed at insert and opened on every read; the startup key check, the no-key refusal and the idempotent backfill cover them. Archives keep the heads sealed; the import opens them to check the snapshot ID and the insert seals them once.

2026-11-13 22:56:52 +01:00

..

store_test.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

store.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

testmain_test.go

secrets: encrypt the evidence snapshot heads at rest

2026-11-13 22:56:52 +01:00