Introduce Keyring: single deep module for envelope encryption#124

Merged

allisson merged 9 commits into

mainfrom

improve-codebase

May 23, 2026

Commits on May 23, 2026

feat(keyring): introduce envelope encryption module

allisson
and
claude
committed
refactor(secrets): migrate to Keyring, drop crypto plumbing

allisson
and
claude
committed
refactor(tokenization): migrate to Keyring with DekHandle path

allisson
and
claude
committed
refactor(transit): migrate to Keyring with DekHandle path

allisson
and
claude
committed
refactor(rewrap-deks): drive KEK rotation worker through Keyring

allisson
and
claude
committed
refactor(crypto): drop DekUseCase and DekRepository from crypto/usecase

allisson
and
claude
committed
docs(adr): add ADR-0013 (Keyring), update ADR-0001 with module pointer

allisson
and
claude
committed
chore(mocks): regenerate after removing DekRepository / DekUseCase

allisson
and
claude
committed
docs(adr): add language to ADR-0013 fenced code block

allisson
and
claude
committed