Expand description
Forge Vault — Host-side encrypted credential store: holds the credential registry, device pairing material, and audit log, sealed by a key derived from the user passphrase + device-bound attestation key (argon2 + chacha20poly1305).