Function decode_row_bytes 

pub fn decode_row_bytes(
    table: &TableSchema,
    payload: &[u8],
    encryption: &EncryptionConfig,
) -> Result<Row, String>

Decode one row-codec payload; trailing bytes are a decode error. §5.11: encrypted columns are decrypted here — the apply seam — back to their declared-type plaintext value for the local mirror.