FLIP-PT-004: authenticated AES-GCM payload encryption + per-trust keys - #845

Draft

atriaybagur wants to merge 8 commits into

claude/aes-gcm-envelope-per-trust-keys

Commits on Jul 29, 2026

fix(security): authenticated AES-GCM payload encryption + per-trust keys (FLIP-PT-004)
claude
committed
3dee6bc

Commits on Jul 30, 2026

chore: drop the internal finding-ID scheme from source
claude
committed
20e5eaf
fix(test): update admin_create_trust for the two new RegisteredTrust fields
claude
committed
609a7eb
fix: deliver the per-trust AES key to the trust on both registration paths
claude
committed
8172c09
docs(trust): describe both registration paths accurately
claude
committed
9a9d1d2
feat(security): key hub->trust task payloads per trust, audit the keyring at startup
claude
committed
8b3ff86
fix: ship the per-trust AES kid inert, so registration cannot break decryption
claude
committed
1f4c35a

Commits on Aug 18, 2026

Merge branch 'develop' into claude/aes-gcm-envelope-per-trust-keys
atriaybagur
committed
1894a69