Encryption and Vault Controls
- AES-256-GCM encryption for file contents and vault metadata
- Duress password workflow with wipe-trigger behavior
- Recovery key support for access recovery and password reset
- Health check for integrity and missing/corrupt object detection
- Audit log for security-relevant actions
- Explorer-based workflow for practical daily use