Issues

• stack-encrypt: a derived record cannot have an EQL type as a field, and JsonTreeDocument has only the old traits

  enhancementrustSDK
  cipherstash/stack#1658 · Filter by author coderdan opened on Nov 14, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: dispatch moves its key-request futures into a Box with leftover plaintext from the caller's stack, and frees it unwiped

  needs-triagerustSDK
  cipherstash/stack#1644 · Filter by author yujiyokoo opened on Nov 13, 2026

• python example: test_error_logs_contain_no_plaintext never shows that the duplicate-customer (409) path logged anything

  needs-triageSDK
  cipherstash/stack#1642 · Filter by author yujiyokoo opened on Nov 13, 2026

• python: decrypt raises a bare Python error, with no code, when converting an opened value fails for a reason other than the value

  needs-triageSDK
  cipherstash/stack#1641 · Filter by author yujiyokoo opened on Nov 13, 2026

• python: encrypt converts each value twice, once to check its range and once to write it

  needs-triageSDK
  cipherstash/stack#1640 · Filter by author yujiyokoo opened on Nov 13, 2026

• python: the fuzz crate's Cargo.lock resolves vitaminc 0.8.1, not the 0.8.0 the SDK ships with

  needs-triageSDK
  cipherstash/stack#1639 · Filter by author yujiyokoo opened on Nov 13, 2026

• @cipherstash/nextjs session forwarding is only tested against mocked responses — run it on real Next.js servers in CI

  needs-triageSDK
  cipherstash/stack#1607 · Filter by author tobyhede opened on Nov 10, 2026

• @cipherstash/nextjs middleware fails the request when CS_WORKSPACE_CRN is missing or invalid — decide whether it should keep throwing

  needs-triageSDK
  cipherstash/stack#1606 · Filter by author tobyhede opened on Nov 10, 2026

• Verify the Postgres v2-to-v3 guide through real harness Runs

  ready-for-agentSDK
  cipherstash/stack#1605 · Filter by author tobyhede opened on Nov 10, 2026

• Complete the tested Protect-to-Stack v3 DynamoDB guide

  ready-for-agentSDK
  cipherstash/stack#1604 · Filter by author tobyhede opened on Nov 10, 2026

• stack-encrypt: bindings send a serialised Planned, and the conformance corpus is written as one

  SDK
  cipherstash/stack#1594 · Filter by author coderdan opened on Nov 9, 2026
  2

• stack-encrypt: a typed Matches query frees its owned text unwiped

  bugSDK
  cipherstash/stack#1593 · Filter by author coderdan opened on Nov 9, 2026

• The musl build image no longer builds

  github-actions
  cipherstash/stack#1583 · Filter by author github-actions opened on Nov 9, 2026

• stack-encrypt: an order index on bytes stores order-revealing terms that no query can use — Index for Ore/Ope/OreBlock is bounded on Orderable, not Ordered

  bugrustSDK
  cipherstash/stack#1577 · Filter by author coderdan opened on Nov 9, 2026 · Stable Stack Encrypt Rust release
  1

  

• stack-encrypt: the caller must look up each record's keyset by hand — let a declaration choose the keyset from a field

  enhancementrustSDK
  cipherstash/stack#1572 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• eql-bindings: every dynamic-interface consumer writes its own TargetResolver — ship one

  enhancementrustSDK
  cipherstash/stack#1571 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: no opt-in type authenticates a collection's order and length — add Positioned<Vec<T>>

  enhancementrustSDK
  cipherstash/stack#1570 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: a string literal, a serde_json::Value, or a newtype needs a copy or hand-written traits — accept borrowed values, add JsonPlaintext and #[derive(Scalar)]

  enhancementrustSDK
  cipherstash/stack#1569 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  1

  

• stack-encrypt: a stored value cannot be tied to its row without changing its key — add labels to EQL payloads

  enhancementrustSDK
  cipherstash/stack#1567 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: every context part is packed into one 512-byte descriptor that ZeroKMS cannot parse — send scopes and bindings as key request items

  enhancementrustSDK
  cipherstash/stack#1566 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• @cipherstash/stack native entry runs getJwt outside the caller's request, so a JWT read from AsyncLocalStorage is lost — take the JWT per call

  bugjavascriptready-for-humanSDK
  cipherstash/stack#1565 · Filter by author coderdan opened on Nov 8, 2026

• stack-encrypt: derive ValueFrame's constant-time PartialEq once vitaminc can compare a Vec<u8>

  enhancementrustSDK
  cipherstash/stack#1542 · Filter by author coderdan opened on Nov 6, 2026

• Epic: Protect/EQL v2 to Stack/EQL v3 guide for DynamoDB and Postgres

  ready-for-agentSDK
  cipherstash/stack#1540 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: loop with stop condition

  ready-for-agentSDK
  cipherstash/stack#1539 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: Iteration with a gated Editor

  ready-for-agentSDK
  cipherstash/stack#1538 · Filter by author tobyhede opened on Nov 6, 2026