Issues

• release-golang.yml can tag a Go version that fails tests-golang.yml on macOS, Windows or the live tests

  enhancementgithub-actionsneeds-triageSDK
  cipherstash/stack#1173 · Filter by author coderdan opened on Oct 12, 2026

• query @@ stored on an EQL match column returns no rows: the reversed @@ overload tests containment backwards

  bugSDK
  cipherstash/stack#1171 · Filter by author coderdan opened on Oct 12, 2026

• stack-auth: a cancelled token refresh locks DeviceSessionStrategy out until restart

  bugrustSDK
  cipherstash/stack#1170 · Filter by author coderdan opened on Oct 12, 2026
  

• Go SDK: one cancelled or timed-out call closes the shared encrypt.Client for every later caller

  bugSDK
  cipherstash/stack#1169 · Filter by author coderdan opened on Oct 12, 2026 · Golang SDK is available to users
  1

  

• EQL: = between an eql_v3 column and an eql_v4 query term returns no rows silently — add cross-version blocker operators

  enhancementneeds-triageSDK
  cipherstash/stack#1160 · Filter by author coderdan opened on Oct 12, 2026

• EQL ORE block comparator timing depends on where operands first differ

  bugSDK
  cipherstash/stack#1149 · Filter by author coderdan opened on Oct 11, 2026
  

• Tracking: implement ADR-0002, new value kinds and EQL v4 for Stack Encrypt

  enhancementSDK
  cipherstash/stack#1145 · Filter by author coderdan opened on Oct 8, 2026

• Go SDK: int16 is widened to Int32, and there's no way to encrypt a date, timestamp, decimal or 128-bit integer

  enhancementSDK
  cipherstash/stack#1144 · Filter by author coderdan opened on Oct 8, 2026

• stash eql install can't install EQL v4 — add --eql-version 3|4|all

  enhancementSDK
  cipherstash/stack#1143 · Filter by author coderdan opened on Oct 8, 2026

• @cipherstash/eql 4.0: ship the v3 and v4 bundles together and move Stack Encrypt's targets to v4

  enhancementrustSDK
  cipherstash/stack#1142 · Filter by author coderdan opened on Oct 8, 2026

• EQL: write the same SQL out as eql_v3 and eql_v4, so Stack Encrypt columns are their own Postgres types

  enhancementrustSDK
  cipherstash/stack#1141 · Filter by author coderdan opened on Oct 8, 2026
  

• stack-encrypt: delete dynamic::Value and Scalar, derive terms through vitaminc, add block ORE, drop Bool order terms

  enhancementrustSDK
  cipherstash/stack#1140 · Filter by author coderdan opened on Oct 8, 2026

• Add advisory ImpactGate reports calibrated against Stack history

  ready-for-agentSDK
  cipherstash/stack#1137 · Filter by author tobyhede opened on Oct 7, 2026

• stashgen refuses the storage-only Text type — it is held back until TextEq is proven end to end

  enhancementrustSDK
  cipherstash/stack#1133 · Filter by author coderdan opened on Oct 7, 2026 · Golang SDK is available to users
  

• stashgen refuses TextOrdOre and TextSearchOre — EQL stores block ORE terms and the engine derives CLLW ORE

  enhancementrustSDK
  cipherstash/stack#1132 · Filter by author coderdan opened on Oct 7, 2026 · Golang SDK is available to users
  1

  

• stashgen refuses TextMatch, TextSearch, TextOrd and TextOrdOpe — the engine derives their terms, but no EQL type is built from them

  enhancementrustSDK
  cipherstash/stack#1131 · Filter by author coderdan opened on Oct 7, 2026 · Golang SDK is available to users
  

• stashgen refuses every number, date and boolean EQL type — produce them in EQL v4 using ADR-0002's encodings

  enhancementrustSDK
  cipherstash/stack#1130 · Filter by author coderdan opened on Oct 7, 2026 · Golang SDK is available to users
  1

  

• Go SDK: CI never runs the example program, so it can break unnoticed

  github-actionsSDK
  cipherstash/stack#1124 · Filter by author coderdan opened on Oct 7, 2026

• stack-encrypt: dynamic::record::decrypt returns passthrough fields next to decrypted ones without saying they are not authenticated

  documentationrustSDK
  cipherstash/stack#1121 · Filter by author coderdan opened on Oct 7, 2026
  1

• stack-encrypt: a second .extend() replaces the first, so Rust builds a different context than Go and a query silently misses

  bugrustSDK
  cipherstash/stack#1120 · Filter by author coderdan opened on Oct 7, 2026
  1

• stack-encrypt: no test reads a record written before the dynamic::record lowering — commit a fixture of old rows

  rustSDK
  cipherstash/stack#1119 · Filter by author coderdan opened on Oct 7, 2026
  1

• stack-encrypt: a Rust String field reads a data-plan leaf as "\nalice" — the Rust chain and a data plan seal different leaf bytes

  needs-triagerustSDK
  cipherstash/stack#1118 · Filter by author auxesis opened on Oct 7, 2026

• Go SDK: stashgen -for and policy generation silently drop a foreign type's unexported fields (protobuf unknownFields) and copy no tags

  enhancementSDK
  cipherstash/stack#1117 · Filter by author coderdan opened on Oct 7, 2026

• Go SDK: methods on Cipher and Client take a *record.Plan and their docs and errors say "plan" — rename and hide them

  enhancementSDK
  cipherstash/stack#1116 · Filter by author coderdan opened on Oct 7, 2026

• Go SDK: Decrypt reads some field types through runtime reflection in gensupport — generate the conversions instead

  enhancementSDK
  cipherstash/stack#1115 · Filter by author coderdan opened on Oct 7, 2026