Crate oxigdal_security 

Enterprise security features for OxiGDAL.

This crate provides comprehensive security features including:

• End-to-end encryption (at rest and in transit)
• Access control (RBAC and ABAC)
• Data lineage tracking
• Audit logging
• Multi-tenancy support
• Data anonymization
• Compliance reporting (GDPR, HIPAA, FedRAMP)
• Security scanning

Cargo features

• enterprise (default): the full server-side surface listed above (async audit/lineage/multitenancy, encryption at rest, scanning, …).
• tls (default): TLS-in-transit support via the pure-Rust OxiTLS stack; implies enterprise.
• attestation (default): lightweight, wasm-friendly crypto dependencies (blake3 hash chain / Merkle root / Ed25519 session seal) for tamper-evident session ledgers. The attestation module itself lands in a follow-up work package; today the feature only enables its dependencies.

With --no-default-features the crate exposes only SecurityConfig and the error module.

Re-exports

pub use error::Result;

pub use error::SecurityError;

Modules

access_control

Access control framework.

anonymization

Data anonymization.

attestation

Tamper-evident session attestation (blake3 hash chain → Merkle root → Ed25519 seal).

audit

Audit logging framework.

compliance

Compliance framework.

encryption

Encryption infrastructure for data at rest and in transit.

error

Error types for the security crate.

lineage

Data lineage tracking system.

multitenancy

Multi-tenancy support.

scanning

Security scanning.

Structs

SecurityConfig

Security configuration.