mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 04:32:42 +00:00
callRoute now fails a call whose JSON body carries a key ending in Encrypted, or bytes serialised as an index-keyed object or a Buffer, on every route it drives and regardless of the contract exemption. A sealed column is decrypted or dropped before a response is built; one that leaks is a defect, whatever the contract says. The kit's own test proves the check finds both shapes and leaves an hour map alone.