Privacy & Data Annihilation

Vault-OS implements a Serialized Postgres Advisory Lock (9999) deletion sequence for secure data destruction. Initiating the Burn Protocol triggers a cascading TRUNCATE across documents and sessions, paired with an OS-level fs.rmSync file wipe to ensure the physical state is unrecoverably altered.

The system operates on a "Volatile Environment" principle. Plaintext secrets (DB passwords, JWT keys) never touch the physical disk. All sensitive data is encrypted with keys derived from your Master Password at runtime, ensuring Zero-Knowledge isolation.

Vault-OS is engineered for absolute isolation. It does not "phone home." There are no background telemetry streams, no external heartbeat checks, and zero unauthorized egress. Once deployed in your secure enclave, the appliance remains strictly sovereign to your local network.