Cryptographic model

Cryptographic model — contract and behavior

• gpg performs per-recipient public-key encryption and key operations; openssl supports delegated primitives used by the vault workflow.
• Skarbiec does not implement novel cryptography and does not place plaintext values in durable application state.
• Reading requires possession of a recipient or recovery private half in the local keyring and, when configured, its passphrase.
• A compromised unlocked host can read what its operator can read; the vault does not replace OS endpoint security.