Sync

Sync — contract and behavior

• Sync transports encrypted records and integrity metadata, not decrypted field values.
• Conflict handling must preserve tamper evidence and never choose a winner by silently rewriting the journal.
• A synced recipient can decrypt only items already sealed to its public key.
• Identity provisioning and recipient registration remain separate from moving encrypted vault state.