tpt-shatter
RustBreach-tolerant data security for Rust without payload encryption: field-level fragmentation across isolated vaults, RAM-only reassembly, short-lived capability tokens, canary decoys and anonymized analytics. Built on tpt-keystone-db and tpt-strata. MIT OR Apache-2.0.
Languages
tpt-shatter
tpt-shatter is a data security architecture that provides confidentiality and integrity
through data fragmentation, ephemeral in-memory processing, strict network isolation,
capability-based access control, canary (honeytoken) detection, and anonymized analytics.
Status: early implementation. Every crate has a working implementation with tests. Known gaps are listed in each crate's README and in the checklist.
- Architecture and rationale: DESIGN.md
- Implementation checklist: todo.md
- Decisions: DECISIONS.md
- Contributing: CONTRIBUTING.md
- Security reporting: SECURITY.md
Crates
| Crate | Role | Docs |
|---|---|---|
| tpt-shatter-common | Shared types, errors, schema, audit chain | README · CHANGELOG |
| tpt-shatter-anonymize | Bucketing, pseudonyms, Laplace noise, k-anonymity | README · CHANGELOG |
| tpt-shatter-token | Capability tokens | README · CHANGELOG |
| tpt-shatter-vault-client | Vault router, circuit breakers, encrypted file vault | README · CHANGELOG |
| tpt-shatter-shredder | Fragmentation, erasure, orphan reaper | README · CHANGELOG |
| tpt-shatter-assembler | Reconstruction, schema migration | README · CHANGELOG |
| tpt-shatter-canary | Canary records, detection, alarm response | README · CHANGELOG |
| tpt-shatter-emitter | Anonymized output, k-anonymity gate, sinks | README · CHANGELOG |
| tpt-shatter-gateway | Token-checked HTTP and TLS read/write gateway | README · CHANGELOG |
| tpt-shatter-node | The node process and token issuer | README · CHANGELOG |
Each crate's README has its examples. Run any of them with cargo run -p <crate> --example <name>.
Quick start
cargo build --workspace
cargo test --workspace
cargo run -p tpt-shatter-node --example in_process_node
License
Copyright (c) 2026 TPT Solutions.
Licensed under either of
- MIT License (LICENSE-MIT)
- Apache License, Version 2.0 (LICENSE-APACHE)
at your option. See NOTICE for attribution details.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this work shall be dual licensed as above, without any additional terms or conditions.