Initial vault: single-binary post-quantum file vault

Strip Fury back to its vault functionality in one `vault` command:
genkey, init, add (file or directory, optional folder inside the vault),
list, get, mv and rm.

The hybrid FrodoKEM-640 + ML-KEM-768 encryption core is kept under
internal/pqcrypt. Signing, policies, profiles, backups, SSH remotes,
FIDO2, agents, provenance and compression are removed.

This commit is contained in:

Andy Dixon

2026-09-26 14:05:10 +01:00

commit d95f2d04a4

26 changed files with 5689 additions and 0 deletions

.gitignore

View File

@@ -0,0 +1,3 @@
 /vault
 /vault.exe
 .claude/