An empty vault accepted any password, so a typo at the first unlock encrypted later secrets under the wrong key. New vaults store a verifier (a known value sealed under the key) that every unlock must open. Vaults from Go or older builds keep today's behaviour and gain a verifier on their next write; Go ignores the extra field (SEC-20261012-016, F8).