DatabaseEncryptionPolicy

Policy for database-at-rest encryption via SQLCipher.

When enabled, all Room databases (queue, audit, config) are encrypted using SQLCipher with a key stored in Android Keystore. This provides an additional encryption layer beyond Android full-disk encryption for federal/DoD deployments.

Requires net.zetetic:sqlcipher-android on the runtime classpath.