// The Charge
Crypt is the zero-trust interceptor that protects proprietary work from the clouds it must pass through. It stands between the file system and the AI assistants, and before a line of sensitive code reaches a cloud model, the mask has already done its work — secrets veiled into opaque aliases the model can carry but never read.
Every outbound payload leaves a full audit record that never leaves the machine. The mask is inert by default — pure passthrough until armed — and enforces strict path discipline with an ignore ledger the smith controls.
// The Arts
What the Forge Commands
Interception at the Boundary
Reads and writes pass the mask before they pass the wall.
Secrets Become Aliases
Keys, credentials, and addresses veiled into opaque tokens.
The Audit Record
Every outbound payload logged in full — locally, always.
Inert by Default
Passthrough until you arm it. Trust is opt-in.
Path Discipline
Strict traversal prevention with an ignore ledger you control.
The Watchtower
A native menu-bar face over the daemon — the mask's state at a glance.
“The shield-brother of Vault — together, the IP-protection stack.”
DS·04 · The Dragon Suite