Yo I vibe coded an application pattern while the tesla self-drove me into work (yolo 2026):
https://github.com/bnolan/cryptosql
It's the pattern i use in voxels (and this blog) - assume that the database can be read by the server operator or government without a warrant (which is true if you're using any US services) - but it also copes with the "my personal data is going into a database administered by a fuckwit" model that causes your personal data to be leaked everywhere constantly.
I may harden this up and make a little suite of apps that run with the model - but I like it. Basically:
- Public data is public
- Write-only access control in the middleware
- Assume the .sqlite database gets leaked
- And so encrypt (shared secrets or user private keys) columns appropriately
- Don't be an anal cunt about metadata, it's best efforts, not signal
Ben out.