Local key custody

LOCAL KEY CUSTODY

A universe inside a key.

Follow the mathematics that keeps your original input under your control.

Key surface markings are illustrative, never actual key material.Enter the key ↓

SHAMIR SECRET SHARING

One secret. Independent shares.

A random polynomial distributes key material across separate guardians. Two distinct shares recover this demo’s key.

f(x) = s + ax over a finite field

DISTRIBUTED CUSTODY

Different routes. One destination.

Follow the illuminated packets through a graph of independent custodians. Export each guardian file separately in the demo.

Network animation illustrates distribution; it is not live network traffic.

PROVIDER BOUNDARY

Verify before you send.

The working gateway sends only the redacted text you approve. The provider can read that text; the vault key stays in your browser.

Implemented · user-reviewed redaction

RESEARCH HORIZON

Computation without exposure.

Encrypted inference and secure multi-party computation can extend the privacy boundary. This architecture is a conceptual visualization.

Conceptual · FHE and MPC inference are not implemented

AUTHORIZED ENDPOINT

The threshold makes it whole.

Select two distinct guardian shares to reconstruct the key locally, then verify the original authenticated ciphertext.

2-of-3 recovery · AES-GCM integrity verification

INTERACTIVE DEMONSTRATION

Take control of the flow.

Create a vault, inspect the outgoing prompt, and test recovery. The cockpit reports events from your current browser session.

Charts above are illustrative. Live session values appear in the cockpit.Launch the workspace ↗
Private Intelligence Workspace Split · Protect · Redact · Control
LOCAL SECURE SESSIONKeys stay on this device
◉Private ModeLoopback / Review-gated
♧

Key Shares / Guardians

Shamir Secret Sharing (Threshold)

RECONSTRUCTION THRESHOLD 0-of-3

Any two shares can reconstruct the key

NOT GENERATED
♧
SPLIT-KEY SECRET SHARING ◈ LIVE WEBGL
CRYPTOGRAPHIC CORE VAULT OFFLINE Initialize your local vault
X 00.319
Y 18.217
Z 04.001
Holo Space
3D Control
Interactive
⬡
Split-Key Secret Sharing Shamir (2-of-3) · AES-256-GCM · Tamper-Aware
UNINITIALIZED DRAG TO ORBIT · CTRL + SCROLL TO ZOOM
♧

Encryption Workflow

From private input to provider-visible prompt

♧Encrypt
→
◉Redact
→
▤Review
Outbound
→
▱Provider
View
→
↻Recover
▤

Secure Prompt

Compose, protect, and review before sending

LOCAL DEMO
SECRET MARKERS0
PROVIDER WORDS0
REVIEW STATEIDLE
♙   Local Secret Vault⊙   Provider-Visible Prompt
TRUE, FULL-CONTEXT PROMPT
Encrypt locally to see the protected ciphertext below.
»
REDACTED, USER-APPROVED
Only marked secrets will be replaced. All other text is visible to the provider.
✧ AI RESPONSE NO RUN YET

The simulated response or real provider output will appear here.

◎

Holographic Control Deck

Make the cockpit feel alive

◌

Prompt Presets

Demo-ready scenarios for judges

Templates automatically include secret markers so the redaction flow is easy to demonstrate live.
⬡

Security & System Status

Cryptography, integrity and session state at a glance

♙AES-256-GCMData Encryption
◇Shamir 2-of-3Key Sharing
⌁Tamper DetectionIntegrity Verification
▤Session StateNOT INITIALIZED
⬡Trust BoundaryLocal Vault → AI
SECURITY CHECKPOINTS 0 / 03
◷

Activity Timeline

Key security events (this session)

Workspace readyInitialize a vault to begin.
Sensitive values must be explicitly marked. Standard hosted LLMs can read any text you approve and transmit.
CIPHERTEXT / ENCRYPTED AT REST 
Awaiting vault initialization and encryption...