zeekay 5f514fa2d9 Initial commit: PCI-compliant card tokenization vault ...

- AES-256-GCM encryption with envelope key management (HSM-ready)
- Token generation with PAN fingerprinting and brand detection
- RBAC authorization (tokenizer, operator, key admin, auditor roles)
- Immutable audit logging for all vault operations
- Card storage with multi-tenant isolation
- HTTP API: tokenize, detokenize, metadata, delete, rotate
- Comprehensive test suite (19 tests, all passing)

Production TODOs: HSM backend, PostgreSQL storage, mTLS, append-only audit DB

2026-02-23 17:44:27 -08:00

..

store_test.go

Initial commit: PCI-compliant card tokenization vault

2026-02-23 17:44:27 -08:00

store.go

Initial commit: PCI-compliant card tokenization vault

2026-02-23 17:44:27 -08:00