Types

Execution Workflow

1. Choose the column type based on storage semantics, not convenience.
2. Use DateTimeUTC for timezone-aware timestamps that must normalize to UTC.
3. Use EncryptedString or EncryptedText only after choosing the encryption backend and key source.
4. Use GUID, JsonB, PasswordHash, and StoredObject where the database contract truly requires them.
5. Check migration and dialect behavior before committing to a custom type in a widely used model.

Implementation Rules

• Require timezone-aware input for UTC datetime fields.
• Never hardcode real encryption keys in model definitions.
• Keep type constructor arguments hashable and cache-safe when custom decorators participate in SQLAlchemy statement caching.
• Treat file-object and password-hash columns as lifecycle-bearing fields, not plain strings.

Example Pattern