Documentation

Rendered from the repository, not copied into it. Each of these is the working document the project uses.

Zero-knowledge proof
The claim, the published policy, and the script that proves a live Vault enforces it
Threat model
Trust boundaries, each adversary's capability, and what stops them
Credential lifecycle
Standing credentials, rotation, and the road to leased secrets
Deep-dive
How it is built and why: zero-knowledge by policy, the two flows, and the design decisions