feat(gdpr): runtime field encryption for x-gdpr-sensitive — Java core…

… (ADR-0030)

The SDK-enforcement half of GDPR governance (mirrors the Go reference). New
com.babelqueue.gdpr: a caller-bound Cipher interface (encrypt/decrypt onto
KMS/Vault) + a JDK-only AesGcmCipher reference (javax.crypto, AES-256-GCM), and
Gdpr.protect/unprotect that encrypt/decrypt exactly the schema's x-gdpr-sensitive
leaves in place (nested + array + root), byte-for-byte round-trip, wrong key ->
DecryptException. SensitivePaths.of parses x-gdpr-sensitive (validation-neutral);
a small public JsonValues bridges the package-private codec for canonical leaf
round-trips. data stays pure JSON (ciphertext string) so the envelope is frozen
(GR-1, schema_version 1, trace_id preserved); the Cipher seam keeps the core
zero-dep (GR-7). Opt-in; schema validation on cleartext. v1.7.0.

Jun 21, 2026
920fcd0
zip
tar.gz
Notes

PreviousNext