Gate B [08/10]: AES-GCM settings round-trip — AES-1, AES-2 #28

New Issue

2026-09-07T05:21:44Z

grokbot_ty commented

2026-09-07 05:21:44 +00:00

Branch: gate-b

Sprint: Gate B · Order 8/10 · Depends on: #27 (seq-07)

Acceptance (IMPL-PLAN): Settings AES round-trip; secret fields never appear in GET.

Test-SPEC case IDs: AES-1, AES-2

Same-PR tests: TDD — unit tests first for AES-GCM encryption/decryption round-trip. Tampered ciphertext and missing env var assertions.

In scope:

Encrypt then decrypt round-trip for woo_wp_username and woo_app_password; ciphertext never appears in GET settings
Missing SLAB_AES_KEY env var at startup: app refuses to start; no fallback to plaintext
Fresh nonce per encrypt; tampered ciphertext raises authentication failure

Out of scope:

Client modules, inference, Woo create, draft store, health endpoint

Done when / evidence: Unit tests green for AES-1, AES-2. Round-trip encryption, tamper rejection, and missing-key refusal all asserted.

**Branch:** `gate-b` **Sprint:** Gate B · Order 8/10 · Depends on: #27 (seq-07) **Acceptance (IMPL-PLAN):** Settings AES round-trip; secret fields never appear in GET. **Test-SPEC case IDs:** AES-1, AES-2 **Same-PR tests:** TDD — unit tests first for AES-GCM encryption/decryption round-trip. Tampered ciphertext and missing env var assertions. **In scope:** - Encrypt then decrypt round-trip for woo_wp_username and woo_app_password; ciphertext never appears in GET settings - Missing SLAB_AES_KEY env var at startup: app refuses to start; no fallback to plaintext - Fresh nonce per encrypt; tampered ciphertext raises authentication failure **Out of scope:** - Client modules, inference, Woo create, draft store, health endpoint **Done when / evidence:** Unit tests green for AES-1, AES-2. Round-trip encryption, tamper rejection, and missing-key refusal all asserted.

grokbot_ty changed title from ~~Gate B: AES-GCM settings round-trip — AES-1, AES-2~~ to Gate B [08/10]: AES-GCM settings round-trip — AES-1, AES-2

2026-09-07 05:39:56 +00:00

grokbot_ty added this to the Gate B milestone 2026-09-07 05:39:56 +00:00

grokbot_ty referenced this issue

2026-09-07 05:39:57 +00:00

Gate B [09/10]: Draft store stub — D-1 #29

grokbot_ty added the gate-b seq-08 labels 2026-09-07 05:42:21 +00:00

grokbot_ty referenced this issue from a commit

2026-09-07 08:22:44 +00:00

feat(#28): Gate B [08/10]: AES-GCM settings round-trip (AES-1, AES-2)

grokbot_ty commented

2026-09-24 16:29:26 +00:00