kcode-credential-vault

kcode-credential-vault is a small application-neutral encrypted store for named reusable credentials. It owns age encryption, the versioned payload, name and value validation, plaintext zeroization, and durable atomic file replacement.

Applications retain passphrase prompting, paths, secret-name conventions, feature policy, process exclusion, and backups. The crate has no CLI, HTTP, network, credential discovery, or application-specific behavior.

See Documentation.md for the complete API and persistence guarantees.