Add transparent encryption to dump uploads
Encrypt database dumps before upload and add keyed config, loading, and decryptable streaming support.
onedump-dump-encryption-pipeline
Normalized profile
What this task asks for
Encrypt database dumps before upload and add keyed config, loading, and decryptable streaming support. NewEncryptor(key []byte) (*Encryptor, error) rejects non-32-byte keys (error wraps ErrInvalidKey). Must return error containing "invalid header" for wrong magic, "unsupported version" for a version other than 0x01, "integrity" if HMAC fails. Truncated data must error. Validate() method on Config: rejects empty/unsupported key source when enabled. Each source requires its own specific fields and must reject fields belonging to other sources (error must contain "mutually exclusive"). Salt at least 16 bytes, empty passphrase rejected.
Intent
- feature implementation
- security remediation
- configuration tuning
- data transformation
Work surfaces
- configuration
- network service
- validation layer
- library API
Technology
- onedump
Expected artifacts
- repository patch
What makes it difficult
- security-sensitive or adversarial behavior
- quantitative performance, accuracy, or resource constraints
- changes span multiple components or interfaces
Published evidence
Model × harness outcomes
Counts are tied to these exact configurations. Harnesses are not treated as equivalent across benchmarks.
- Models
- 13
- Configurations
- 41
- Trials
- 164
Showing 41 of 41 configurations
| Model | Harness | Effort | Result | Passes |
|---|---|---|---|---|
| claude-fable-5vertex_ai | mini-swe-agentpublished configuration | low | All passed | 4/4 |
| claude-fable-5vertex_ai | mini-swe-agentpublished configuration | medium | Mixed | 3/4 |
| claude-fable-5vertex_ai | mini-swe-agentpublished configuration | high | Mixed | 1/4 |
| claude-fable-5vertex_ai | mini-swe-agentpublished configuration | xhigh | No passes | 0/4 |
| claude-fable-5vertex_ai | mini-swe-agentpublished configuration | max | No passes | 0/4 |
| claude-opus-4-8anthropic | mini-swe-agentpublished configuration | low | Mixed | 1/4 |
| claude-opus-4-8anthropic | mini-swe-agentpublished configuration | medium | Mixed | 2/4 |
| claude-opus-4-8anthropic | mini-swe-agentpublished configuration | high | Mixed | 3/4 |
| claude-opus-4-8anthropic | mini-swe-agentpublished configuration | xhigh | All passed | 4/4 |
| claude-opus-4-8anthropic | mini-swe-agentpublished configuration | max | Mixed | 2/4 |
| claude-sonnet-4-6anthropic | mini-swe-agentpublished configuration | high | Mixed | 2/4 |
| claude-sonnet-5anthropic | mini-swe-agentpublished configuration | low | Mixed | 1/4 |
| claude-sonnet-5anthropic | mini-swe-agentpublished configuration | medium | Mixed | 2/4 |
| claude-sonnet-5anthropic | mini-swe-agentpublished configuration | high | Mixed | 1/4 |
| claude-sonnet-5anthropic | mini-swe-agentpublished configuration | xhigh | Mixed | 1/4 |
| claude-sonnet-5anthropic | mini-swe-agentpublished configuration | max | Mixed | 2/4 |
| gemini-3-1-pro-previewvertex_ai | mini-swe-agentpublished configuration | high | No passes | 0/4 |
| gemini-3-5-flashvertex_ai | mini-swe-agentpublished configuration | medium | Mixed | 2/4 |
| glm-5-2zai | mini-swe-agentpublished configuration | high | Mixed | 2/4 |
| glm-5-2zai | mini-swe-agentpublished configuration | max | Mixed | 1/4 |
| gpt-5-4openai | mini-swe-agentpublished configuration | xhigh | No passes | 0/4 |
| gpt-5-5openai | mini-swe-agentpublished configuration | low | Mixed | 1/4 |
| gpt-5-5openai | mini-swe-agentpublished configuration | medium | No passes | 0/4 |
| gpt-5-5openai | mini-swe-agentpublished configuration | high | Mixed | 1/4 |
| gpt-5-5openai | mini-swe-agentpublished configuration | xhigh | No passes | 0/4 |
| gpt-5-6-lunaopenai | mini-swe-agentpublished configuration | low | No passes | 0/4 |
| gpt-5-6-lunaopenai | mini-swe-agentpublished configuration | medium | No passes | 0/4 |
| gpt-5-6-lunaopenai | mini-swe-agentpublished configuration | high | No passes | 0/4 |
| gpt-5-6-lunaopenai | mini-swe-agentpublished configuration | xhigh | No passes | 0/4 |
| gpt-5-6-lunaopenai | mini-swe-agentpublished configuration | max | Mixed | 2/4 |
| gpt-5-6-solopenai | mini-swe-agentpublished configuration | low | No passes | 0/4 |
| gpt-5-6-solopenai | mini-swe-agentpublished configuration | medium | No passes | 0/4 |
| gpt-5-6-solopenai | mini-swe-agentpublished configuration | high | No passes | 0/4 |
| gpt-5-6-solopenai | mini-swe-agentpublished configuration | xhigh | No passes | 0/4 |
| gpt-5-6-solopenai | mini-swe-agentpublished configuration | max | Mixed | 2/4 |
| gpt-5-6-terraopenai | mini-swe-agentpublished configuration | low | No passes | 0/4 |
| gpt-5-6-terraopenai | mini-swe-agentpublished configuration | medium | No passes | 0/4 |
| gpt-5-6-terraopenai | mini-swe-agentpublished configuration | high | Mixed | 1/4 |
| gpt-5-6-terraopenai | mini-swe-agentpublished configuration | xhigh | Mixed | 1/4 |
| gpt-5-6-terraopenai | mini-swe-agentpublished configuration | max | Mixed | 1/4 |
| kimi-k2-7-codeopenrouter | mini-swe-agentpublished configuration | default | Mixed | 1/4 |