aeat.adapters.persistence.storage.envelope package

Envelope substrate: JSON envelopes and secure-bound repositories.

Public surface for the schema-versioned envelope contract used by file-backed persistence consumers. Re-exports the typed Envelope and CipherEnvelope records, the AeadAlgorithm catalogue, the EncryptionMetadata record, the plaintext / ciphertext save/load helpers (save_envelope(), load_envelope(), save_encrypted_envelope(), load_encrypted_envelope(), reencrypt_envelope_file()), and the SecureBoundRepository generic base that domain repositories subclass for encrypted-object persistence.

The file helpers are the controlled plaintext/cipher envelope I/O surface. SecureBoundRepository uses the encrypted SQL adapters.persistence.storage.SecureObjectRepository backend instead; its path-shaped methods are logical diagnostics, not authority to create plaintext sidecar files.

Submodules

• aeat.adapters.persistence.storage.envelope._envelope module
  • AeadAlgorithm
    • AeadAlgorithm.AES_256_GCM_V1
  • EncryptionMetadata
    • EncryptionMetadata.algorithm
    • EncryptionMetadata.nonce_b64
    • EncryptionMetadata.ciphertext_b64
    • EncryptionMetadata.associated_data_b64
    • EncryptionMetadata.from_blob()
    • EncryptionMetadata.to_blob()
    • EncryptionMetadata.associated_data()
  • Envelope
    • Envelope.schema_version
    • Envelope.written_at
    • Envelope.classification
    • Envelope.payload
    • Envelope.encryption
    • Envelope.for_payload_type()
  • save_envelope()
  • load_envelope()
  • CipherEnvelope
    • CipherEnvelope.cipher_schema_version
    • CipherEnvelope.written_at
    • CipherEnvelope.classification
    • CipherEnvelope.encryption
  • build_aad()
  • derive_envelope_key()
  • save_encrypted_envelope()
  • load_encrypted_envelope()
  • reencrypt_envelope_file()
• aeat.adapters.persistence.storage.envelope._repository_test_suite module
  • SecureRepositoryContractCase
    • SecureRepositoryContractCase.repository_factory
    • SecureRepositoryContractCase.first_payload
    • SecureRepositoryContractCase.second_payload
    • SecureRepositoryContractCase.plaintext_witnesses
    • SecureRepositoryContractCase.mutation_field
  • assert_secure_repository_contract()
  • EXPECTED_CHECK_COUNT
• aeat.adapters.persistence.storage.envelope._secure_repository module
  • SecureBoundRepository
    • SecureBoundRepository.namespace
    • SecureBoundRepository.sensitivity
    • SecureBoundRepository.schema_version
    • SecureBoundRepository.payload_type
    • SecureBoundRepository.extract_identifier()
    • SecureBoundRepository.payload_model()
    • SecureBoundRepository.store_dir
    • SecureBoundRepository.envelope_path_for()
    • SecureBoundRepository.lock_target_for()
    • SecureBoundRepository.secure_object_repository
    • SecureBoundRepository.load()
    • SecureBoundRepository.save()
    • SecureBoundRepository.delete()
    • SecureBoundRepository.iter_ids()
    • SecureBoundRepository.iter_records()