Vault
Demo — Sanction HQ
Secrets, people, and the record. The roster stays the home.
Credentials
Secrets the agents may inject. Encrypted. Shown never.
Providers
Model keys in the vault. Agents hold Sanction keys only.
People
Who can approve, who can look, who holds the management key.
Policy
The ladder on this group — approve, escalate, deny.
Spend
Tokens, authorized spend, burn. The meter behind the cards.
Signed record
Every decision, hash-chained. Evidence, not a log dump.