Stratara

CQRS and Event Sourcing for .NET — with tamper-evident streams and tenant-aware encryption built in.

Stratara is the integrated CQRS, Event Sourcing, and audit stack you'd otherwise compose yourself from three or four libraries. Mediator, outbox, event store, sagas, projections, and identity — all wired together, lockstep-versioned across 24 NuGet packages for .NET 10. Opt in à la carte.

Why Stratara

🔒 Tamper-Evident by Design — Every event stream is hash-chained. Manipulate a row directly in Postgres, and the next background-worker pass raises EventStreamCorrupted at the exact sequence number where the chain breaks. Audit-grade integrity, not a "trust the DBA" promise.

🛡️ Tenant-Aware Encryption — [EncryptData] fields are sealed with AES-GCM and an authentication tag bound to the tenant id as Associated Data. A row leaked from one tenant cannot be decrypted in another tenant's session — even with the correct master key.

⚖️ GDPR Article 17 by Construction — You can't delete an immutable event, but you can destroy the key that decrypts it. Crypto-shredding erases a subject's data everywhere it landed — events, snapshots, replicas, unreachable backups — with one EraseScopeAsync call. The same per-subject-key model underwrites SOC 2 / ISO 27001 and HIPAA separation.

🧩 Integrated, not Assembled — Mediator + Outbox + Event Store + Sagas + Projections + Identity, lockstep-versioned across 24 packages. One <VersionPrefix> bump moves everything together. No multi-library composition tax.

Where to start

• Concepts — the load-bearing ideas. Read these first.
• Hero Samples — TamperProof and Encryption, runnable in under a second.
• What is Stratara — the 5-minute pitch, who it's for, and who it's not for.
• Architecture at a glance — tier layout, package boundaries, dependency direction.
• First Stratara App — a 30-line walkthrough.
• Learning-path Samples — five end-to-end demos along a CQRS → Event Sourcing → Outbox → Saga → ASP.NET progression.
• API Reference — auto-generated from XML docs across every public type.

Install

dotnet add package Stratara.Mediator
dotnet add package Stratara.Abstractions

A typical host wires Stratara through one of the umbrella Add*WorkerServices extensions; see getting started for the full DI composition.

Versioning

Stratara ships in lockstep — all 24 packages share the same <VersionPrefix>. See CHANGELOG.md for release notes.