brainos-vault 0.3.0

Credential vault with OS keychain and encrypted-file fallback
Documentation

Brain Credential Vault

Secure credential storage with OS keychain preferred and an AES-256-GCM encrypted-file fallback. Raw values are injected at execution time and never passed through BrainOS memory in plaintext form outside the vault call site.

See docs/AUTONOMOUS_IMPLEMENTATION.md §1.2 for the Phase 1b MVP spec.