Skip to content

feat(security): add opaque entity references - #177

Merged
philipgreat merged 1 commit into
mainfrom
feature/security-foundations-java
Sep 26, 2026
Merged

philipgreat merged 1 commit into
mainfrom
feature/security-foundations-java

Conversation

@philipgreat

Copy link
Copy Markdown
Contributor

Closes #176

What changed

  • adds the provider-neutral EntityReferenceCodec contract on UserContext
  • adds portable AES-256-GCM references with rotation, expiry, type and purpose binding
  • matches the Go/.NET golden vector and stable fail-closed errors
  • adds a focused source-backed security example to the normal example gate

Verification

  • mvn -q -pl teaql-runtime,teaql-tfp-endpoint,examples/security-foundations -am -Dsurefire.failIfNoSpecifiedTests=false test
  • ./scripts/verify-examples.sh

Implements the portable UserContext reference contract and runnable evidence.\n\nRefs #176
@philipgreat
philipgreat merged commit 629061b into main Sep 26, 2026
5 checks passed
@philipgreat
philipgreat deleted the feature/security-foundations-java branch September 26, 2026 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Align Java backend security foundations with portable TeaQL contract

1 participant