Module codec 

Payload codecs: encryption applied inside the application before payloads become records.

A codec sees workflow inputs and results, step results, signals, update arguments and results, child inputs and heartbeat progress. Record headers (IDs, names, positions), error messages and search attributes stay readable so the engine can route and index them. The log, checkpoints, the run store, replicas and a Fusee server hold only what the codec produced.

aes_gcm() encrypts with AES-256-GCM. Every payload carries the ID of the key that encrypted it, so keys can rotate: the first key encrypts, every listed key decrypts. Payloads without the codec’s marker (written before the codec was turned on) are passed through unchanged.

Structs

AesGcmCodec

AES-256-GCM with key IDs.

Traits

Codec

Transforms payloads on their way into and out of the journal.

Functions

aes_gcm

An AES-256-GCM codec. keys are (key ID, 32-byte key); the first one encrypts new payloads.