Vault
AES-256-GCM encrypted placeholder mappings. The vault key never leaves the backend.
Records
Loading vault records…
Ciphertext only: record listings expose metadata, never plaintext values or key material.
Restore selected placeholders
Restore is disabled on this instance (no VAULT_RESTORE_TOKEN configured). Enable it deliberately to allow rehydration.