Skip to content

docs(vault): a how-to for shielded sign-off, linked from both vaults - #383

Open
QSchlegel wants to merge 1 commit into
preprodfrom
claude/shielded-signoff-guide
Open

docs(vault): a how-to for shielded sign-off, linked from both vaults#383
QSchlegel wants to merge 1 commit into
preprodfrom
claude/shielded-signoff-guide

Conversation

@QSchlegel

Copy link
Copy Markdown
Collaborator

The construction shipped without anywhere that explains it. The vault pages show a trust graph and a disclosure path to someone who has not been told what either means.

What the guide covers

The three things that actually change how you use it:

  • Why the logical and trust relations must stay apart. Hashes cannot cycle, so the moment you want tamper-evidence you have to decide which references carry weight.
  • Why one root is not enough. Proving anything reveals the root, and a single root tells the recipient how your organisation is grouped. Hence proxy hubs.
  • Exactly what a disclosure gives away — including the part that is easy to miss: it leaks the count of documents under the disclosed hub, and the count of hubs. Not names, not contents. If those counts are themselves sensitive, that changes how you split your hubs.

Plus the setup path, which was the original complaint: your vault is not a separate thing you create, it is built from documents you already have, and documentType is what becomes the hub.

It says what is not a button yet

disclose and verifyDisclosure exist with tests covering relabelling, reordering, tampering and cross-vault splicing — but grep confirms they are imported only by the test file. Nothing in the product exports a disclosure artefact.

So the guide states that plainly: the vault view shows what a disclosure would reveal, which is the part that changes how you organise a vault, and handing the artefact to a counterparty is the next step rather than a shipped one. A guide about proofs is a strange place to start being loose about what exists.

Linked, not just published

From the wallet's own vault and from the public demo at /vault. A guide nobody can reach from the thing it explains is not documentation.

It also picks up the existing blog SEO wiring for free — getAllPostsMeta lists it, and the sitemap includes every published post.

tsc --noEmit clean; 1161 tests pass; next build exit 0.

🤖 Generated with Claude Code

The construction was shipped without anywhere that explains it. The vault
pages show a trust graph and a disclosure path to someone who has not been
told what either means.

The guide covers the three things that actually change how you use it: why
the logical and trust relations must stay apart (hashes cannot cycle, so
the moment you want tamper-evidence you must decide which references carry
weight), why one root is not enough (proving anything reveals the root,
and the root tells the recipient how your organisation is grouped), and
exactly what a disclosure gives away — including the part that is easy to
miss, that it leaks the COUNT of documents under the disclosed hub and the
count of hubs.

It also says plainly what is not a button yet. `disclose` and
`verifyDisclosure` exist with tests covering relabelling, reordering,
tampering and cross-vault splicing, but grep confirms they are imported
only by the test file: nothing in the product exports a disclosure
artefact. The vault view SHOWS what one would reveal, which is the part
that changes how you organise a vault, and the guide is explicit that
handing the artefact to a counterparty is the next step rather than a
shipped one. Promising otherwise in a guide about proofs would be a
strange place to start being loose.

Linked from the wallet's own vault and from the public demo, because a
guide nobody can find from the thing it explains is not documentation.

1161 tests pass; tsc clean; next build exit 0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Aug 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
multisig Ready Ready Preview Aug 23, 2026 2:27pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant