Tickets·PRJ00004·Kin Capital·TASK00023
Vault encryption at rest — pgcrypto + Supabase Vault key + reveal RPC
Description
pgcrypto + a Supabase Vault key; a BEFORE INSERT/UPDATE trigger encrypts secrets; reveal_vault_secret / decrypt_vault_secret RPCs decrypt on demand (service-role only) and every reveal is logged. Migrations ...0004 + ...0007.
Thread
1App write paths unchanged — the trigger encrypts transparently; only reveal/share decrypt. Verified round-trip on seeded secrets.
Saied Mohammed · 2d ago
Details
- Done
- High
- Saied Mohammed
- —
- 2d ago
Status
Priority
Assignee
Due date
Updated
POCs
0- No POCs yet.