code wiki / vault
topic: vault
23 modules sharing the vault name family (derived from the tree's prefix discipline).
| module | description | lines | funcs |
|---|---|---|---|
| nx_vault.nx | sovereign secrets vault CLI (HashiCorp-Vault-class, | 339 | 17 |
| nx_vault_acl.nx | sovereign path-based ACL POLICY engine (HashiCorp Vault "policies + identity" gap from | 40 | 2 |
| nx_vault_acl_test.nx | ACLGATE: proves the path-based policy engine. Rules: secret/ -> READ; | 54 | 3 |
| nx_vault_auth.nx | sovereign MULTI-AUTH methods (HashiCorp Vault "auth methods" gap from | 30 | 2 |
| nx_vault_auth_test.nx | AUTHGATE: proves multi-auth methods end-to-end. Principals: a token, a userpass | 65 | 3 |
| nx_vault_census.nx | HONEST capability audit model: our sovereign Vault vs HashiCorp Vault (operator: | 30 | 5 |
| nx_vault_census_test.nx | VAULTCENSUSGATE: proves the HONEST Vault-vs-HashiCorp audit over the 16-feature | 70 | 3 |
| nx_vault_dynamic.nx | sovereign DYNAMIC SECRETS (HashiCorp Vault "dynamic secrets engines" gap from | 30 | 3 |
| nx_vault_dynamic_test.nx | DYNGATE: proves dynamic secrets. GREEN iff: two issues yield DISTINCT creds; | 51 | 3 |
| nx_vault_gateway.nx | OPAQUE-gated /vault media browser (M0 product surface) per the family-suite spec. | 456 | 25 |
| nx_vault_lease.nx | sovereign LEASE / TTL / auto-expiry (HashiCorp Vault "leasing" gap from | 40 | 4 |
| nx_vault_lease_test.nx | LEASEGATE: proves the lease/TTL/auto-expiry engine. GREEN iff: valid within | 47 | 3 |
| nx_vault_migrate.nx | ONE-SHOT KDF MIGRATION v1 -> v2 for every named secret in | 169 | 12 |
| nx_vault_multi.nx | MULTI-SECRET vault capability (operator: "like the hashicorp vault"). Proves | 93 | 8 |
| nx_vault_rotation.nx | sovereign LEASE-DRIVEN AUTO-ROTATION (upgrades the rotation PARTIAL in | 27 | 4 |
| nx_vault_rotation_test.nx | ROTATIONGATE: proves lease-driven auto-rotation. GREEN iff: not due before | 48 | 3 |
| nx_vault_selftest.nx | SECURITY SELF-TEST: the vault's three guarantees re-proven mechanically, | 97 | 7 |
| nx_vault_shamir.nx | sovereign SHAMIR threshold secret sharing (HashiCorp Vault "Shamir seal/unseal" gap | 60 | 7 |
| nx_vault_shamir_test.nx | SHAMIRGATE: proves K-of-N threshold unseal. Split secret into N=5 shares with | 74 | 5 |
| nx_vault_suite_test.nx | SUITEGATE: the workstream regression-lock for the whole sovereign Vault. Imports | 73 | 5 |
| nx_vault_transit.nx | sovereign TRANSIT engine (encryption-as-a-service): the HashiCorp Vault "transit" | 60 | 4 |
| nx_vault_transit_test.nx | TRANSITGATE: proves the sovereign transit engine (encryption-as-a-service) | 83 | 5 |
| nx_vault_v3_gate.nx | re-runnable GATE for the v3 vault format (Engineer verb: VERIFY). | 147 | 9 |