AES-256-GCM is the easy part. The bundle format around it — IV, auth tag, key derivation, version field — is where 90% of real-world encryption failures live. Here is what a good bundle looks like and why the JSON wrapper is the actual feature.