[E17-S01-T03] One-way lookup hash at rest #320

New Issue

2026-08-27T08:05:47Z

kpcto commented

2026-08-27 08:05:47 +00:00

Parent story: [E17-S01] Anonymous preference identity (#123)

Intent

Persist only a one-way lookup hash of the identity token so the raw token never appears at rest.

Acceptance criteria

The server stores only a one-way hash of the token.
The raw token is not recoverable from stored data.
Lookup matches a token by hashing the presented value.

Explicitly out of scope

Lazy creation, token generation, expiration, cookie contents and corrupt-token handling (sibling tasks T01-T02, T04-T06).

Test plan

Assert the stored column holds a hash, not the raw token.
Assert lookup succeeds by hashing the presented token.

Rollback note

Revert the commit. Previously stored hashes remain valid. No migration.

Owning stream

platform

Risk quadrant

agent-full

> Parent story: [E17-S01] Anonymous preference identity (#123) ## Intent Persist only a one-way lookup hash of the identity token so the raw token never appears at rest. ## Acceptance criteria - The server stores only a one-way hash of the token. - The raw token is not recoverable from stored data. - Lookup matches a token by hashing the presented value. ## Explicitly out of scope - Lazy creation, token generation, expiration, cookie contents and corrupt-token handling (sibling tasks T01-T02, T04-T06). ## Test plan - Assert the stored column holds a hash, not the raw token. - Assert lookup succeeds by hashing the presented token. ## Rollback note - Revert the commit. Previously stored hashes remain valid. No migration. ### Owning stream platform ### Risk quadrant agent-full

kpcto added this to the Sprint 5 milestone 2026-08-27 08:05:47 +00:00

kpcto added the

labels 2026-08-27 08:05:47 +00:00

Sign in to join this conversation.