feat(stack-encrypt)!: derive terms through vitaminc-normalize and walk dynamic values as Plaintext

.changeset/eql-text-equality-transcoding.md

@@ -2,4 +2,4 @@
 '@cipherstash/eql': minor
 ---
 
-**Rust `eql_bindings::v4::text::{TextEq, TextEqQuery}` support Stack Encrypt's target-directed API behind the `stack-encrypt` feature.** Stack Encrypt writes EQL v4 only, so the `eql_v3` types carry no Stack Encrypt traits. The stored table and column identifier supplies the encryption context; native ciphertext and equality terms are transcoded into EQL payloads while Vitamin C owns plaintext encoding. This is a new producer profile with exact string equality, independent of existing cipherstash-client ciphertext and terms. Query operands carry no recoverable ciphertext.
+**Rust `eql_bindings::v4::text::{TextEq, TextEqQuery}` support Stack Encrypt's target-directed API behind the `stack-encrypt` feature.** Stack Encrypt writes EQL v4 only, so the `eql_v3` types carry no Stack Encrypt traits. The stored table and column identifier supplies the encryption context; native ciphertext and equality terms are transcoded into EQL payloads while Vitamin C owns plaintext encoding. This is a new producer profile whose string equality compares text in Unicode 16 NFC without folding case, independent of existing cipherstash-client ciphertext and terms. Text holding a code point unassigned in Unicode 16 is refused, when it is stored as well as when it is queried. Query operands carry no recoverable ciphertext.

Cargo.toml

@@ -127,5 +127,9 @@ vitaminc-aead = "0.6.0"
 vitaminc-aead-frame = "0.6.0"
 vitaminc-encrypt = "0.6.0"
 vitaminc-hmac = "0.6.0"
-vitaminc-prf = "0.6.0"
+# Not on crates.io yet: the `[patch.crates-io]` block below supplies it.
+# Normalized equality terms (Unicode 16 NFC text, one integer encoding for
+# every width), which `vitaminc-prf`'s `normalize` feature derives over.
+vitaminc-normalize = "0.6.0"
+vitaminc-prf = { version = "0.6.0", features = ["normalize"] }
 vitaminc-protected = "0.6.0"