hcsql BETA
A table is a .cake. hcsql wraps psql so individual columns in a Postgres table are encrypted at rest the same way cells in a .cake are. Holders of the key see plaintext. Everyone else sees [REDACTED].
Column-level encryptionEncrypt SSN, salary, PII at the cell. Keep the rest of the table queryable.
Predicate-aware SELECTWHERE and JOIN on encrypted columns via session-scoped temp materialization.
Plaintext writes blockedA Postgres trigger rejects any UPDATE that bypasses Honeycake encryption.