The vault was read-only TypeScript and held no secret the mesh uses (hq ADR 0349 §7, §11; ADR 0113 §1, §2, §22). It now keeps each secret in its own store, sealed to its own key and to the operator key, answers the seat's verb get sealed to the asker's key and only to an allowed asker (nobody yet: V4 and P3 bring the rule), raises secret-changed without a value, and takes no private key. The custody ledger and its three tools carry over unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
11 lines
187 B
AMPL
11 lines
187 B
AMPL
module mesh-vault
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
git.novox.be/novox/mesh-sdk/go v0.1.14-0.20261013235212-c8b07242a009
|
|
golang.org/x/crypto v0.50.0
|
|
)
|
|
|
|
require golang.org/x/sys v0.43.0 // indirect
|