Recovery Safeguards
Strict governance preventing accidental or unauthorized release of vault contents.
4-Stage Recovery Pipeline
1
Request Initiated
Inactivity TriggerCan only be opened after the owner misses a check-in and the mandatory grace period expires.
2
Nominee Approval (2 of 3)
Multi-Party GateTwo distinct active nominees must authenticate and submit an explicit approval. Single-nominee takeover is physically prevented.
3
Cooling-off Period
Cancellation WindowA safety delay (48 hours prod / 2 minutes demo) allows the owner to immediately cancel any false trigger or premature attempt.
4
Unlock Window (7 Days)
Client-Only DecryptionCiphertext envelope becomes downloadable. Recovery nominees input 2 offline cards into their browser to combine the DEK locally.
Test owner override in simulated environment