Encryption example

Run the Rust and Go payload-encryption examples locally.

Both examples construct a typed payload, encrypt its envelope before enqueue would occur, verify that stored bytes differ from plaintext, and authenticate the original bytes on decode. They use an in-process static keyring so no database or KMS is required.

Rust

cargo run --manifest-path examples/rust/Cargo.toml --bin encryption

Expected output:

payload encrypted before enqueue and authenticated on decode

The repository verification script compiles and runs both examples. For production key rotation, threat boundaries, and encrypted handler registration, continue to the full guide.

Encryption at rest