Secrets infrastructureStart
Install and initialize
Build the binary, initialize an owner and recovery recipient, and verify the vault before storing secrets.
Install and initialize — contract and behavior
- Initialization creates vault metadata sealed to the chosen owner and recovery recipients.
- gpg, openssl, and shasum are runtime dependencies because Skarbiec delegates cryptography and integrity operations.
- The owner private half stays in the local keyring; a separate recovery recipient protects against loss of the daily identity.
- Keep the vault, audit journal, and recipient key material under OS-level ownership and backup controls.
Commands and examples
cargo build --releaseskarbiec --help