data.encrypted_field_invalid

A field that can't be stored sealed, or that says it isn't sealed when its type always is.

Area 15, Personal data; not declinable; the next step is usually the agent's.

Why Jadpo refuses it

A sealed column holds bytes only the application can open, so anything the database itself has to read can't be one: a record's id, a reference, which is a foreign key, a generated field, and a File, whose column points at bytes kept in a store. The reverse is refused too: a key type, a TotpSecret and a SecretText are secrets, never stored as themselves, so a field of one can't turn encrypted: off.

What it looks like

A referral whose reference to a clinician says it is sealed:

config {    field_encryption_key: EncryptionKey}application {    field_encryption_key: config.field_encryption_key}/// A clinician.entity Clinician {    id: Uuid}/// A referral to a clinician.entity Referral {    id: Uuid    clinician_id: Clinician.id {        on_delete: OnDelete.restricted        encrypted: true    }}

   |17 |     clinician_id: Clinician.id {   |                   ^^^^^^^^^^^^^^ a reference, read by the database

(agent) at the end of the next: line means your coding agent can make the fix itself: what the database has to read can't be sealed.

A secret kept sealed that says it isn't:

config {    field_encryption_key: EncryptionKey}application {    field_encryption_key: config.field_encryption_key}/// A person's authenticator.entity Authenticator {    id: Uuid    code_secret: TotpSecret {        encrypted: false    }}

   |13 |         encrypted: false   |         ^^^^^^^^^ always sealed

How to fix it

If the field has to be a reference, an id or a generated time, remove encrypted::

    clinician_id: Clinician.id {        on_delete: OnDelete.restricted    }

It stays readable to anyone with a copy of the database, so keep what must stay private in a field of its own.

If it is a secret, remove encrypted: false:

    code_secret: TotpSecret

It stays sealed, as it would have whichever it said.

Related

• Encrypted fields
• How a secret is kept