Issues

• @cipherstash/nextjs session forwarding is only tested against mocked responses — run it on real Next.js servers in CI

  needs-triageSDK
  cipherstash/stack#1607 · Filter by author tobyhede opened on Nov 10, 2026

• @cipherstash/nextjs middleware fails the request when CS_WORKSPACE_CRN is missing or invalid — decide whether it should keep throwing

  needs-triageSDK
  cipherstash/stack#1606 · Filter by author tobyhede opened on Nov 10, 2026

• Verify the Postgres v2-to-v3 guide through real harness Runs

  ready-for-agentSDK
  cipherstash/stack#1605 · Filter by author tobyhede opened on Nov 10, 2026

• Complete the tested Protect-to-Stack v3 DynamoDB guide

  ready-for-agentSDK
  cipherstash/stack#1604 · Filter by author tobyhede opened on Nov 10, 2026

• stack-encrypt: bindings send a serialised Planned, and the conformance corpus is written as one

  SDK
  cipherstash/stack#1594 · Filter by author coderdan opened on Nov 9, 2026
  2

• stack-encrypt: a typed Matches query frees its owned text unwiped

  bugSDK
  cipherstash/stack#1593 · Filter by author coderdan opened on Nov 9, 2026

• The musl build image no longer builds

  github-actions
  cipherstash/stack#1583 · Filter by author github-actions opened on Nov 9, 2026

• stack-encrypt: an order index on bytes stores order-revealing terms that no query can use — Index for Ore/Ope/OreBlock is bounded on Orderable, not Ordered

  bugrustSDK
  cipherstash/stack#1577 · Filter by author coderdan opened on Nov 9, 2026 · Stable Stack Encrypt Rust release
  1

  

• stack-encrypt: the caller must look up each record's keyset by hand — let a declaration choose the keyset from a field

  enhancementrustSDK
  cipherstash/stack#1572 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• eql-bindings: every dynamic-interface consumer writes its own TargetResolver — ship one

  enhancementrustSDK
  cipherstash/stack#1571 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: no opt-in type authenticates a collection's order and length — add Positioned<Vec<T>>

  enhancementrustSDK
  cipherstash/stack#1570 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: a string literal, a serde_json::Value, or a newtype needs a copy or hand-written traits — accept borrowed values, add JsonPlaintext and #[derive(Scalar)]

  enhancementrustSDK
  cipherstash/stack#1569 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: a stored value cannot be tied to its row without changing its key — add labels to EQL payloads

  enhancementrustSDK
  cipherstash/stack#1567 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• stack-encrypt: every context part is packed into one 512-byte descriptor that ZeroKMS cannot parse — send scopes and bindings as key request items

  enhancementrustSDK
  cipherstash/stack#1566 · Filter by author coderdan opened on Nov 8, 2026 · Stable Stack Encrypt Rust release
  

• @cipherstash/stack native entry runs getJwt outside the caller's request, so a JWT read from AsyncLocalStorage is lost — take the JWT per call

  bugjavascriptready-for-humanSDK
  cipherstash/stack#1565 · Filter by author coderdan opened on Nov 8, 2026

• stack-encrypt: derive ValueFrame's constant-time PartialEq once vitaminc can compare a Vec<u8>

  enhancementrustSDK
  cipherstash/stack#1542 · Filter by author coderdan opened on Nov 6, 2026

• Epic: Protect/EQL v2 to Stack/EQL v3 guide for DynamoDB and Postgres

  ready-for-agentSDK
  cipherstash/stack#1540 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: loop with stop condition

  ready-for-agentSDK
  cipherstash/stack#1539 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: Iteration with a gated Editor

  ready-for-agentSDK
  cipherstash/stack#1538 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: real Migrator (headless, isolated, Friction Log)

  ready-for-agentSDK
  cipherstash/stack#1537 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: Reference Migration, static layer and selftest

  ready-for-agentSDK
  cipherstash/stack#1536 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: Oracle no-rewrite layer

  ready-for-agentSDK
  cipherstash/stack#1535 · Filter by author tobyhede opened on Nov 6, 2026

• Migration harness: Run skeleton and behaviour checks on Legacy Data

  ready-for-agentSDK
  cipherstash/stack#1534 · Filter by author tobyhede opened on Nov 6, 2026

• EQL v4 indexes aren't used under row-level security

  cipherstash/stack#1525 · Filter by author jonathon-walker opened on Nov 5, 2026
  1

• stack-encrypt conformance: query one language's fresh EQL rows with the other's terms through PostgreSQL

  SDK
  cipherstash/stack#1512 · Filter by author coderdan opened on Nov 3, 2026 · Stable Stack Encrypt Rust release