# The Arkosalv security core

## Available source
/vault-core.ts is the exact browser-side vault encryption implementation.
AES-256-GCM authenticated encryption, random 96-bit nonce and 128-bit salt,
PBKDF2 SHA-256 with 310,000 iterations, nonextractable derived keys.
Passphrases and plaintext are not sent to a server by this tool.
Downloads remain the user's responsibility. Browser extensions, device malware,
and a compromised page can still access plaintext while the vault is open.

## Member communications
New message subjects and bodies use random AES-256-GCM keys, wrapped separately
for each recipient using RSA-OAEP SHA-256 (3072-bit). Drafts wrap to the owner only.
Private keys are backed up under a separate user-held passphrase using the vault
encryption above; decrypted nonextractable keys remain in memory until mailbox lock.
Server delivery and database triggers reject new unencrypted member messages.
Recipients without keys and outside addresses are rejected, never silently downgraded.
Routing addresses and timestamps remain visible. Old messages are not retroactively
encrypted. Member-mail TI uses on-device deterministic text tools, not cloud processing.
This is not forward-secret messaging and has not undergone independent audit.
Public keys are registered immutably but their directory still relies on server trust;
an independent key-transparency service and out-of-band key checking remain future work.
Other platforms need to integrate the encrypted connector before exchanging mail.

## Identity handoffs
HMAC-signed tokens are single-use, audience-bound and expire in 120 seconds.
Redemption atomically consumes the stored launch. Per-platform verification
requirements are checked both before issue and before redemption.
Only consented verification categories/status/review dates are shared.

## Data lifecycle
Export includes the user's account, mail, verification, handoffs, privacy preferences,
access events and deletion requests. Account erasure is a recorded request with a
48-hour target, not an implemented global deletion guarantee. Recipient copies,
independent platforms, immutable records, legal retention and backups require review.

## Status
Source visibility is not an independent audit or an open-source license.
Repository publication, licensing, oversight board and independent audits remain pending.