One key per student, and why that's the whole point
Envelope encryption with a per-record data key turns "we deleted it" from a policy statement into a fact you can verify — and turns key loss into a permanent, irreversible cost.
Track
Engineering
Field-level encryption, self-hosting, Go and htmx, and what a hundred passing tests failed to catch — written for the people evaluating this product.
What a hundred passing tests didn't catch
The core loop passed every test in the suite and was completely inert in a browser, because no test ever fetched what a template referenced.