Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: BabelQueue/babelqueue-java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.6.0
Choose a base ref
...
head repository: BabelQueue/babelqueue-java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.7.0
Choose a head ref
  • 1 commit
  • 14 files changed
  • 1 contributor

Commits on Jun 21, 2026

  1. feat(gdpr): runtime field encryption for x-gdpr-sensitive — Java core… 

    … (ADR-0030)

The SDK-enforcement half of GDPR governance (mirrors the Go reference). New
com.babelqueue.gdpr: a caller-bound Cipher interface (encrypt/decrypt onto
KMS/Vault) + a JDK-only AesGcmCipher reference (javax.crypto, AES-256-GCM), and
Gdpr.protect/unprotect that encrypt/decrypt exactly the schema's x-gdpr-sensitive
leaves in place (nested + array + root), byte-for-byte round-trip, wrong key ->
DecryptException. SensitivePaths.of parses x-gdpr-sensitive (validation-neutral);
a small public JsonValues bridges the package-private codec for canonical leaf
round-trips. data stays pure JSON (ciphertext string) so the envelope is frozen
(GR-1, schema_version 1, trace_id preserved); the Cipher seam keeps the core
zero-dep (GR-7). Opt-in; schema validation on cleartext. v1.7.0.
    @muhammetsafak
    muhammetsafak committed Jun 21, 2026
    Configuration menu
    Copy the full SHA
    920fcd0 View commit details
    Browse the repository at this point in the history
Loading