Back to the laboratory

DAILYOPS / VAULT FOR HUMANS AND MACHINES

Treat access as an operating state, not a permanent grant.

A zero-knowledge vault where humans keep passwords, SSH keys, certificates, API tokens and OTP fully client-side — while agents and services receive secrets through controlled, just-in-time injection, never pasted into an LLM prompt.

THE OPERATING PROBLEM

Long-lived access hides operational risk.

Credentials, service identities and exceptional privileges often outlive the work that justified them — invisible until an incident names them.

WHAT THE SYSTEM MAKES POSSIBLE

OpsVault / 03
01

Zero-knowledge for humans

Argon2id and AES-256-GCM; the master key never leaves the client, sealed backups and recovery keys keep the path honest.

02

Agents and JIT leases

Machine clients redeem secrets through just-in-time leases, with a handle they exchange for material.

03

Non-human identity

NHI inventory, findings and policy export keep service and agent identities accountable.

VISUAL EVIDENCE

Access states, made visible.

Reserved for an identity inventory, an ephemeral-access flow and an evidence view.

Screenshots will be placed here when they are ready.

BUILD POSITION

“Access should have a purpose, an owner and an expiry.”

The product is built around one operating question: who reaches what, why, and until when.

RESOURCES

Explanation before repository.

Need a hand? I can help with guides and tech topics.