fix(proxy): stop the JSON selector fusion leaking plaintext (CIP-3682) - #435

Merged

freshtonic merged 12 commits into

mainfrom

james/cip-3682-json-selector-fusion-plaintext-leak

Aug 5, 2026

Commits on Aug 5, 2026

fix(mapper): fuse a chained JSON accessor into one value-selector path
freshtonic
committed
3677523
fix(proxy): compose the fused JSON selector path from every accessor step
freshtonic
committed
52bf8c7
fix(proxy): bind NULL when an encrypted operand produced no ciphertext
freshtonic
committed
d0305ff
test(integration): read the stored payload from the database Proxy uses
freshtonic
committed
ed612c5
fix(mapper): see through parentheses when walking a JSON accessor chain
freshtonic
committed
334f31a
fix(mapper): make an extracted encrypted JSON value unqueryable
freshtonic
committed
acb2511
refactor(mapper): put the extracted-JSON type behind JsonLike::Output
freshtonic
committed
0cabd73
fix(mapper): use infer_enter to tell a fusable chain from a doomed one
freshtonic
committed
07d6b0f
feat: resolve a multi-step encrypted JSON path in every context
freshtonic
committed
96b00b4
test(integration): read a two-level encrypted JSON path back through Proxy
freshtonic
committed
7b656cc
fix(mapper): an extracted JSON field is orderable and equatable, not inert
freshtonic
committed
462706e
docs(showcase): chained JSON accessors are supported now — document the real limits
freshtonic
committed
ea2212b