Marc-André Bombeck 2710dfc041 feat(insights): add an encrypted table for status notes ...

Status notes (the per-metric text a model writes) move out of audit_logs
into InsightStatusCache: one row per user, metric and locale, the note
encrypted at rest, upserted in place, with the input and snapshot
fingerprints and a separate negative-cache window.

Migration 0344 creates the table and deletes every audit_logs row whose
action matches insights.%-status.%. The notes are a regenerable cache and
the old rows are plaintext, so nothing is copied; the first nightly run
after the upgrade writes them again. Take a backup before applying.

The table is registered for key rotation, excluded from backups as a
regenerable cache, and deleted by Delete All Data.

Refs #975

2026-09-24 09:03:58 +02:00

..

__tests__

fix(crypto): rotate the backup blob and stop keying the registry on names

2026-09-03 06:29:57 +02:00

encrypted-columns.ts

feat(insights): add an encrypted table for status notes

2026-09-24 09:03:58 +02:00

encryption-corpus.ts

fix(crypto): rotate the backup blob and stop keying the registry on names

2026-09-03 06:29:57 +02:00

note-cipher.ts

feat(security): encrypt medication free-text notes at rest + password-change MFA step-up

2026-06-28 03:05:10 +02:00