Repository navigation
Conversation
|
Contributor
|
Important Draft PR not reviewedDraft PRs are not automatically reviewed by default.
To automatically review draft PRs, update your CodeRabbit configuration: reviews:
auto_review:
drafts: true |
Contributor
Mutation testing (cargo-mutants,
|
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Stack Encrypt needs shared expectations for runtime values as well as declarations. This adds the experimental
record-runtime-v1profile with 37 cases executed in native Rust and Go WASI.The corpus covers missing versus explicit null values, SQL-null omission, sealed-null ciphertext lengths and equality, typed batch round trips, early source refusals, and lossless equality-query conversions. For example, a missing SQL-null field opens as null; a missing sealed-null field is refused. An int64 query can narrow exactly to int32, while an out-of-range or fractional value is refused.
Native provider counters check that invalid batches make no data-key calls and successful batches make one generation/retrieval call when ciphertext is stored. Go's earlier host rejection of missing and unknown fields is recorded explicitly, separately from guest diagnostics. Go provider-call counts are not claimed.
The conformance task and CI guard run all three profiles. The runtime contract, roadmap and coverage map document scope and consolidation candidates. Existing generated SDK, EQL and wider type/operator tests remain intact. Malformed stored records, authenticated read-type failures, context composition, and Python/TypeScript runners remain follow-up work.
Stack: #1404 → #1460 → this PR. Review against
feat/stack-encrypt-conformance; merge the parents first and retarget as they land.Validation: all 249 shared cases and fresh scalar Go-to-Rust artifact exchange pass locally; Rust clippy/formatting, Go lint, Biome and 34 CI wiring checks pass. The unchanged deterministic guest was reused from the parent. No live credentials or database required. Test/docs/tooling changes only; no production API changes or release changeset.