[{"data":1,"prerenderedAt":3914},["ShallowReactive",2],{"navigation":3,"\u002Frecipes\u002Fconfidential-hr":927},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":535,"access":12,"apiToc":929,"body":930,"category":3906,"description":3907,"extension":3908,"meta":3909,"navigation":3906,"nest":3906,"path":536,"seo":3910,"sinceVersion":3906,"status":3911,"stem":537,"subtitle":3906,"tier":3912,"tocExternal":3906,"__hash__":3913},"docs\u002Frecipes\u002Fconfidential-hr.md",false,{"type":931,"value":932,"toc":3894},"minimark",[933,937,992,1005,1012,1017,1065,1069,1182,1185,1188,1789,1793,1808,2118,2132,2162,2166,2180,2373,2399,2472,2476,2482,2695,2720,2745,2749,2759,3038,3045,3066,3079,3083,3093,3444,3457,3586,3590,3597,3843,3862,3866,3890],[934,935,535],"h1",{"id":936},"confidential-hr-records",[938,939,940],"blockquote",{},[941,942,943,947,948,951,952,956,957,960,961,956,964,960,967,956,970,960,973,956,976,960,979,956,982,960,985,956,988,991],"p",{},[944,945,946],"strong",{},"Audience:"," teams holding co-located records of mixed sensitivity in one collection — an employee's public basics beside their salary — who need the sensitive fields cryptographically gated, not just hidden by a UI check.\n",[944,949,950],{},"Bundle:"," core + ",[953,954,955],"code",{},"withTiers()"," (",[953,958,959],{},"@noy-db\u002Fhub\u002Ftiers",") + ",[953,962,963],{},"withTeam()",[953,965,966],{},"@noy-db\u002Fhub\u002Fteam",[953,968,969],{},"withBlobs()",[953,971,972],{},"@noy-db\u002Fhub\u002Fblobs",[953,974,975],{},"withSearch()",[953,977,978],{},"@noy-db\u002Fhub",[953,980,981],{},"withHistory()",[953,983,984],{},"@noy-db\u002Fhub\u002Fhistory",[953,986,987],{},"withForget()",[953,989,990],{},"@noy-db\u002Fhub\u002Fforget",").",[941,993,994,995,1004],{},"Verified by: ",[996,997,1001],"a",{"href":998,"rel":999},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002Frecipe-confidential-hr.recipe.test.ts",[1000],"nofollow",[953,1002,1003],{},"showcases\u002Fsrc\u002Frecipe-confidential-hr.recipe.test.ts"," — the code below is the same code that runs there.",[941,1006,1007,1008,1011],{},"An HR vault stores each employee's public basics — name, role, start date — right next to their salary, performance notes, and signed contract PDFs. Those two halves need different confidentiality. ",[996,1009,1010],{"href":873},"Record tiers"," give the sensitive half its own per-tier data-encryption key (DEK): a caller at the public floor cannot decrypt a record parked above it, cannot see it on a plain read, and cannot search or overwrite it — while the public basics stay readable to everyone with the collection DEK. This recipe walks the whole tier surface: gated reads, a TTL-bound elevation for a privileged write, a delegation to a payroll reviewer, tier-aware search, a contract blob that follows its record's tier, and a right-to-erasure that shreds across tiers.",[1013,1014,1016],"h2",{"id":1015},"prerequisites","Prerequisites",[1018,1019,1020,1032,1045,1058],"ul",{},[1021,1022,1023,1024,1027,1028,991],"li",{},"The Bundle line's six strategies, passed to ",[953,1025,1026],{},"createNoydb()"," together (see ",[996,1029,1031],{"href":1030},"#setup","Setup",[1021,1033,1034,1037,1038,1041,1042,1044],{},[944,1035,1036],{},"Every tiered collection must declare its tiers"," — ",[953,1039,1040],{},"vault.collection(name, { tiers: [0, 1] })",". A collection that never declares ",[953,1043,872],{}," is a plain tier-0 collection.",[1021,1046,1047,1053,1054,1057],{},[944,1048,1049,1050],{},"The blob-owning collection also needs ",[953,1051,1052],{},"perRecordKeys: true"," — a blob can only be tier-isolated when its owning record carries a per-record key; ",[953,1055,1056],{},"blobTierPolicy: 'isolate'"," then keeps the content unshared so it re-keys with the record.",[1021,1059,1060,1061,1064],{},"The vault owner (",[953,1062,1063],{},"hr-admin"," here) auto-mints tier DEKs at write time. A lower-tier session or a delegate is what makes the gate observable.",[1013,1066,1068],{"id":1067},"what-this-gets-you","What this gets you",[1070,1071,1072,1085],"table",{},[1073,1074,1075],"thead",{},[1076,1077,1078,1082],"tr",{},[1079,1080,1081],"th",{},"Capability",[1079,1083,1084],{},"Provided by",[1086,1087,1088,1106,1116,1126,1140,1154,1169],"tbody",{},[1076,1089,1090,1094],{},[1091,1092,1093],"td",{},"Salary parked above the public floor, invisible to a below-tier read",[1091,1095,1096,1098,1099,1102,1103],{},[953,1097,955],{}," + ",[953,1100,1101],{},"putAtTier()"," \u002F the collection's ",[953,1104,1105],{},"tiers: [0, 1]",[1076,1107,1108,1111],{},[1091,1109,1110],{},"A cleared read that decrypts above your inherent tier",[1091,1112,1113],{},[953,1114,1115],{},"getAtTier()",[1076,1117,1118,1121],{},[1091,1119,1120],{},"A time-boxed, audited session that writes at an elevated tier",[1091,1122,1123],{},[953,1124,1125],{},"vault.elevate(tier, { ttlMs, reason })",[1076,1127,1128,1131],{},[1091,1129,1130],{},"Handing a reviewer scoped, expiring access without a full grant",[1091,1132,1133,1136,1137,1139],{},[953,1134,1135],{},"vault.delegate()"," (needs ",[953,1138,963],{}," for the reviewer's keyring)",[1076,1141,1142,1145],{},[1091,1143,1144],{},"Semantic search that skips — never refuses — elevated records",[1091,1146,1147,1149,1150,1153],{},[953,1148,975],{}," + a collection ",[953,1151,1152],{},"embeddings"," encoder",[1076,1155,1156,1159],{},[1091,1157,1158],{},"A contract PDF whose storage tier follows its owning record",[1091,1160,1161,1098,1163,1098,1166],{},[953,1162,969],{},[953,1164,1165],{},"blobTierPolicy",[953,1167,1168],{},"blob(id).atTier()",[1076,1170,1171,1174],{},[1091,1172,1173],{},"Right-to-erasure that crypto-shreds across every tier",[1091,1175,1176,1178,1179,1181],{},[953,1177,987],{}," (+ ",[953,1180,981],{}," for the ledger proof)",[1013,1183,1031],{"id":1184},"setup",[941,1186,1187],{},"Every beat below shares one wiring — the vault owner's console:",[1189,1190,1195],"pre",{"className":1191,"code":1192,"language":1193,"meta":1194,"style":1194},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb, withSearch } from '@noy-db\u002Fhub'\nimport { withTiers } from '@noy-db\u002Fhub\u002Ftiers'\nimport { withTeam } from '@noy-db\u002Fhub\u002Fteam'\nimport { withBlobs } from '@noy-db\u002Fhub\u002Fblobs'\nimport { withHistory } from '@noy-db\u002Fhub\u002Fhistory'\nimport { withForget } from '@noy-db\u002Fhub\u002Fforget'\nimport { toMemory } from '@noy-db\u002Fto-memory'\n\ninterface Employee { employeeId: string; name: string; role: string; startDate: string }\ninterface Salary { employeeId: string; amount: string; notes: string }\ninterface Contract { employeeId: string; title: string }\ninterface Review { employeeId: string; notes: string }\n\nconst PUBLIC = 0\nconst CONFIDENTIAL = 1\n\nconst db = await createNoydb({\n  store: toMemory(),\n  user: 'hr-admin',\n  secret: 'hr-console-secret-2026',\n  tiersStrategy: withTiers(),\n  teamStrategy: withTeam(),\n  blobsStrategy: withBlobs(),\n  searchStrategy: withSearch(),\n  historyStrategy: withHistory(),\n  forgetStrategy: withForget({ subjects: { employees: 'employeeId', salaries: 'employeeId' } }),\n})\n\nconst vault = await db.openVault('acme-hr')\n","ts","",[953,1196,1197,1235,1255,1275,1295,1315,1335,1356,1363,1417,1453,1480,1506,1511,1527,1540,1545,1567,1583,1600,1617,1631,1645,1659,1673,1687,1743,1752,1757],{"__ignoreMap":1194},[1198,1199,1202,1206,1210,1214,1217,1220,1223,1226,1229,1232],"span",{"class":1200,"line":1201},"line",1,[1198,1203,1205],{"class":1204},"s7zQu","import",[1198,1207,1209],{"class":1208},"sMK4o"," {",[1198,1211,1213],{"class":1212},"sTEyZ"," createNoydb",[1198,1215,1216],{"class":1208},",",[1198,1218,1219],{"class":1212}," withSearch",[1198,1221,1222],{"class":1208}," }",[1198,1224,1225],{"class":1204}," from",[1198,1227,1228],{"class":1208}," '",[1198,1230,978],{"class":1231},"sfazB",[1198,1233,1234],{"class":1208},"'\n",[1198,1236,1238,1240,1242,1245,1247,1249,1251,1253],{"class":1200,"line":1237},2,[1198,1239,1205],{"class":1204},[1198,1241,1209],{"class":1208},[1198,1243,1244],{"class":1212}," withTiers",[1198,1246,1222],{"class":1208},[1198,1248,1225],{"class":1204},[1198,1250,1228],{"class":1208},[1198,1252,959],{"class":1231},[1198,1254,1234],{"class":1208},[1198,1256,1258,1260,1262,1265,1267,1269,1271,1273],{"class":1200,"line":1257},3,[1198,1259,1205],{"class":1204},[1198,1261,1209],{"class":1208},[1198,1263,1264],{"class":1212}," withTeam",[1198,1266,1222],{"class":1208},[1198,1268,1225],{"class":1204},[1198,1270,1228],{"class":1208},[1198,1272,966],{"class":1231},[1198,1274,1234],{"class":1208},[1198,1276,1278,1280,1282,1285,1287,1289,1291,1293],{"class":1200,"line":1277},4,[1198,1279,1205],{"class":1204},[1198,1281,1209],{"class":1208},[1198,1283,1284],{"class":1212}," withBlobs",[1198,1286,1222],{"class":1208},[1198,1288,1225],{"class":1204},[1198,1290,1228],{"class":1208},[1198,1292,972],{"class":1231},[1198,1294,1234],{"class":1208},[1198,1296,1298,1300,1302,1305,1307,1309,1311,1313],{"class":1200,"line":1297},5,[1198,1299,1205],{"class":1204},[1198,1301,1209],{"class":1208},[1198,1303,1304],{"class":1212}," withHistory",[1198,1306,1222],{"class":1208},[1198,1308,1225],{"class":1204},[1198,1310,1228],{"class":1208},[1198,1312,984],{"class":1231},[1198,1314,1234],{"class":1208},[1198,1316,1318,1320,1322,1325,1327,1329,1331,1333],{"class":1200,"line":1317},6,[1198,1319,1205],{"class":1204},[1198,1321,1209],{"class":1208},[1198,1323,1324],{"class":1212}," withForget",[1198,1326,1222],{"class":1208},[1198,1328,1225],{"class":1204},[1198,1330,1228],{"class":1208},[1198,1332,990],{"class":1231},[1198,1334,1234],{"class":1208},[1198,1336,1338,1340,1342,1345,1347,1349,1351,1354],{"class":1200,"line":1337},7,[1198,1339,1205],{"class":1204},[1198,1341,1209],{"class":1208},[1198,1343,1344],{"class":1212}," toMemory",[1198,1346,1222],{"class":1208},[1198,1348,1225],{"class":1204},[1198,1350,1228],{"class":1208},[1198,1352,1353],{"class":1231},"@noy-db\u002Fto-memory",[1198,1355,1234],{"class":1208},[1198,1357,1359],{"class":1200,"line":1358},8,[1198,1360,1362],{"emptyLinePlaceholder":1361},true,"\n",[1198,1364,1366,1370,1374,1376,1380,1383,1386,1389,1392,1394,1396,1398,1401,1403,1405,1407,1410,1412,1414],{"class":1200,"line":1365},9,[1198,1367,1369],{"class":1368},"spNyl","interface",[1198,1371,1373],{"class":1372},"sBMFI"," Employee",[1198,1375,1209],{"class":1208},[1198,1377,1379],{"class":1378},"swJcz"," employeeId",[1198,1381,1382],{"class":1208},":",[1198,1384,1385],{"class":1372}," string",[1198,1387,1388],{"class":1208},";",[1198,1390,1391],{"class":1378}," name",[1198,1393,1382],{"class":1208},[1198,1395,1385],{"class":1372},[1198,1397,1388],{"class":1208},[1198,1399,1400],{"class":1378}," role",[1198,1402,1382],{"class":1208},[1198,1404,1385],{"class":1372},[1198,1406,1388],{"class":1208},[1198,1408,1409],{"class":1378}," startDate",[1198,1411,1382],{"class":1208},[1198,1413,1385],{"class":1372},[1198,1415,1416],{"class":1208}," }\n",[1198,1418,1420,1422,1425,1427,1429,1431,1433,1435,1438,1440,1442,1444,1447,1449,1451],{"class":1200,"line":1419},10,[1198,1421,1369],{"class":1368},[1198,1423,1424],{"class":1372}," Salary",[1198,1426,1209],{"class":1208},[1198,1428,1379],{"class":1378},[1198,1430,1382],{"class":1208},[1198,1432,1385],{"class":1372},[1198,1434,1388],{"class":1208},[1198,1436,1437],{"class":1378}," amount",[1198,1439,1382],{"class":1208},[1198,1441,1385],{"class":1372},[1198,1443,1388],{"class":1208},[1198,1445,1446],{"class":1378}," notes",[1198,1448,1382],{"class":1208},[1198,1450,1385],{"class":1372},[1198,1452,1416],{"class":1208},[1198,1454,1456,1458,1461,1463,1465,1467,1469,1471,1474,1476,1478],{"class":1200,"line":1455},11,[1198,1457,1369],{"class":1368},[1198,1459,1460],{"class":1372}," Contract",[1198,1462,1209],{"class":1208},[1198,1464,1379],{"class":1378},[1198,1466,1382],{"class":1208},[1198,1468,1385],{"class":1372},[1198,1470,1388],{"class":1208},[1198,1472,1473],{"class":1378}," title",[1198,1475,1382],{"class":1208},[1198,1477,1385],{"class":1372},[1198,1479,1416],{"class":1208},[1198,1481,1483,1485,1488,1490,1492,1494,1496,1498,1500,1502,1504],{"class":1200,"line":1482},12,[1198,1484,1369],{"class":1368},[1198,1486,1487],{"class":1372}," Review",[1198,1489,1209],{"class":1208},[1198,1491,1379],{"class":1378},[1198,1493,1382],{"class":1208},[1198,1495,1385],{"class":1372},[1198,1497,1388],{"class":1208},[1198,1499,1446],{"class":1378},[1198,1501,1382],{"class":1208},[1198,1503,1385],{"class":1372},[1198,1505,1416],{"class":1208},[1198,1507,1509],{"class":1200,"line":1508},13,[1198,1510,1362],{"emptyLinePlaceholder":1361},[1198,1512,1514,1517,1520,1523],{"class":1200,"line":1513},14,[1198,1515,1516],{"class":1368},"const",[1198,1518,1519],{"class":1212}," PUBLIC ",[1198,1521,1522],{"class":1208},"=",[1198,1524,1526],{"class":1525},"sbssI"," 0\n",[1198,1528,1530,1532,1535,1537],{"class":1200,"line":1529},15,[1198,1531,1516],{"class":1368},[1198,1533,1534],{"class":1212}," CONFIDENTIAL ",[1198,1536,1522],{"class":1208},[1198,1538,1539],{"class":1525}," 1\n",[1198,1541,1543],{"class":1200,"line":1542},16,[1198,1544,1362],{"emptyLinePlaceholder":1361},[1198,1546,1548,1550,1553,1555,1558,1561,1564],{"class":1200,"line":1547},17,[1198,1549,1516],{"class":1368},[1198,1551,1552],{"class":1212}," db ",[1198,1554,1522],{"class":1208},[1198,1556,1557],{"class":1204}," await",[1198,1559,1213],{"class":1560},"s2Zo4",[1198,1562,1563],{"class":1212},"(",[1198,1565,1566],{"class":1208},"{\n",[1198,1568,1570,1573,1575,1577,1580],{"class":1200,"line":1569},18,[1198,1571,1572],{"class":1378},"  store",[1198,1574,1382],{"class":1208},[1198,1576,1344],{"class":1560},[1198,1578,1579],{"class":1212},"()",[1198,1581,1582],{"class":1208},",\n",[1198,1584,1586,1589,1591,1593,1595,1598],{"class":1200,"line":1585},19,[1198,1587,1588],{"class":1378},"  user",[1198,1590,1382],{"class":1208},[1198,1592,1228],{"class":1208},[1198,1594,1063],{"class":1231},[1198,1596,1597],{"class":1208},"'",[1198,1599,1582],{"class":1208},[1198,1601,1603,1606,1608,1610,1613,1615],{"class":1200,"line":1602},20,[1198,1604,1605],{"class":1378},"  secret",[1198,1607,1382],{"class":1208},[1198,1609,1228],{"class":1208},[1198,1611,1612],{"class":1231},"hr-console-secret-2026",[1198,1614,1597],{"class":1208},[1198,1616,1582],{"class":1208},[1198,1618,1620,1623,1625,1627,1629],{"class":1200,"line":1619},21,[1198,1621,1622],{"class":1378},"  tiersStrategy",[1198,1624,1382],{"class":1208},[1198,1626,1244],{"class":1560},[1198,1628,1579],{"class":1212},[1198,1630,1582],{"class":1208},[1198,1632,1634,1637,1639,1641,1643],{"class":1200,"line":1633},22,[1198,1635,1636],{"class":1378},"  teamStrategy",[1198,1638,1382],{"class":1208},[1198,1640,1264],{"class":1560},[1198,1642,1579],{"class":1212},[1198,1644,1582],{"class":1208},[1198,1646,1648,1651,1653,1655,1657],{"class":1200,"line":1647},23,[1198,1649,1650],{"class":1378},"  blobsStrategy",[1198,1652,1382],{"class":1208},[1198,1654,1284],{"class":1560},[1198,1656,1579],{"class":1212},[1198,1658,1582],{"class":1208},[1198,1660,1662,1665,1667,1669,1671],{"class":1200,"line":1661},24,[1198,1663,1664],{"class":1378},"  searchStrategy",[1198,1666,1382],{"class":1208},[1198,1668,1219],{"class":1560},[1198,1670,1579],{"class":1212},[1198,1672,1582],{"class":1208},[1198,1674,1676,1679,1681,1683,1685],{"class":1200,"line":1675},25,[1198,1677,1678],{"class":1378},"  historyStrategy",[1198,1680,1382],{"class":1208},[1198,1682,1304],{"class":1560},[1198,1684,1579],{"class":1212},[1198,1686,1582],{"class":1208},[1198,1688,1690,1693,1695,1697,1699,1702,1705,1707,1709,1712,1714,1716,1719,1721,1723,1726,1728,1730,1732,1734,1736,1738,1741],{"class":1200,"line":1689},26,[1198,1691,1692],{"class":1378},"  forgetStrategy",[1198,1694,1382],{"class":1208},[1198,1696,1324],{"class":1560},[1198,1698,1563],{"class":1212},[1198,1700,1701],{"class":1208},"{",[1198,1703,1704],{"class":1378}," subjects",[1198,1706,1382],{"class":1208},[1198,1708,1209],{"class":1208},[1198,1710,1711],{"class":1378}," employees",[1198,1713,1382],{"class":1208},[1198,1715,1228],{"class":1208},[1198,1717,1718],{"class":1231},"employeeId",[1198,1720,1597],{"class":1208},[1198,1722,1216],{"class":1208},[1198,1724,1725],{"class":1378}," salaries",[1198,1727,1382],{"class":1208},[1198,1729,1228],{"class":1208},[1198,1731,1718],{"class":1231},[1198,1733,1597],{"class":1208},[1198,1735,1222],{"class":1208},[1198,1737,1222],{"class":1208},[1198,1739,1740],{"class":1212},")",[1198,1742,1582],{"class":1208},[1198,1744,1746,1749],{"class":1200,"line":1745},27,[1198,1747,1748],{"class":1208},"}",[1198,1750,1751],{"class":1212},")\n",[1198,1753,1755],{"class":1200,"line":1754},28,[1198,1756,1362],{"emptyLinePlaceholder":1361},[1198,1758,1760,1762,1765,1767,1769,1772,1775,1778,1780,1782,1785,1787],{"class":1200,"line":1759},29,[1198,1761,1516],{"class":1368},[1198,1763,1764],{"class":1212}," vault ",[1198,1766,1522],{"class":1208},[1198,1768,1557],{"class":1204},[1198,1770,1771],{"class":1212}," db",[1198,1773,1774],{"class":1208},".",[1198,1776,1777],{"class":1560},"openVault",[1198,1779,1563],{"class":1212},[1198,1781,1597],{"class":1208},[1198,1783,1784],{"class":1231},"acme-hr",[1198,1786,1597],{"class":1208},[1198,1788,1751],{"class":1212},[1013,1790,1792],{"id":1791},"gated-reads-public-basics-stay-readable-salary-does-not","Gated reads — public basics stay readable, salary does not",[941,1794,1795,1796,1800,1801,1804,1805,1774],{},"The employee's basics live at tier 0; the salary is ",[1797,1798,1799],"em",{},"born"," confidential via a direct tiered write (",[953,1802,1803],{},"putAtTier","), never a plain ",[953,1806,1807],{},"put()",[1189,1809,1811],{"className":1191,"code":1810,"language":1193,"meta":1194,"style":1194},"const employees = vault.collection\u003CEmployee>('employees', { tiers: [PUBLIC, CONFIDENTIAL] })\nconst salaries = vault.collection\u003CSalary>('salaries', { tiers: [PUBLIC, CONFIDENTIAL] })\n\nawait employees.put('e1', { employeeId: 'e1', name: 'Dana Lopez', role: 'Engineer', startDate: '2024-02-01' })\nawait salaries.putAtTier('e1', { employeeId: 'e1', amount: '145000', notes: 'strong Q1' }, CONFIDENTIAL)\n\nawait employees.get('e1')     \u002F\u002F → { …, role: 'Engineer' } — tier-0 basics, readable\nawait salaries.get('e1')      \u002F\u002F → null — the read gate runs off the live `_tier` header before any decrypt\n",[953,1812,1813,1869,1918,1922,2000,2064,2068,2094],{"__ignoreMap":1194},[1198,1814,1815,1817,1820,1822,1825,1827,1830,1833,1836,1839,1841,1843,1846,1848,1850,1852,1855,1857,1860,1862,1865,1867],{"class":1200,"line":1201},[1198,1816,1516],{"class":1368},[1198,1818,1819],{"class":1212}," employees ",[1198,1821,1522],{"class":1208},[1198,1823,1824],{"class":1212}," vault",[1198,1826,1774],{"class":1208},[1198,1828,1829],{"class":1560},"collection",[1198,1831,1832],{"class":1208},"\u003C",[1198,1834,1835],{"class":1372},"Employee",[1198,1837,1838],{"class":1208},">",[1198,1840,1563],{"class":1212},[1198,1842,1597],{"class":1208},[1198,1844,1845],{"class":1231},"employees",[1198,1847,1597],{"class":1208},[1198,1849,1216],{"class":1208},[1198,1851,1209],{"class":1208},[1198,1853,1854],{"class":1378}," tiers",[1198,1856,1382],{"class":1208},[1198,1858,1859],{"class":1212}," [PUBLIC",[1198,1861,1216],{"class":1208},[1198,1863,1864],{"class":1212}," CONFIDENTIAL] ",[1198,1866,1748],{"class":1208},[1198,1868,1751],{"class":1212},[1198,1870,1871,1873,1876,1878,1880,1882,1884,1886,1889,1891,1893,1895,1898,1900,1902,1904,1906,1908,1910,1912,1914,1916],{"class":1200,"line":1237},[1198,1872,1516],{"class":1368},[1198,1874,1875],{"class":1212}," salaries ",[1198,1877,1522],{"class":1208},[1198,1879,1824],{"class":1212},[1198,1881,1774],{"class":1208},[1198,1883,1829],{"class":1560},[1198,1885,1832],{"class":1208},[1198,1887,1888],{"class":1372},"Salary",[1198,1890,1838],{"class":1208},[1198,1892,1563],{"class":1212},[1198,1894,1597],{"class":1208},[1198,1896,1897],{"class":1231},"salaries",[1198,1899,1597],{"class":1208},[1198,1901,1216],{"class":1208},[1198,1903,1209],{"class":1208},[1198,1905,1854],{"class":1378},[1198,1907,1382],{"class":1208},[1198,1909,1859],{"class":1212},[1198,1911,1216],{"class":1208},[1198,1913,1864],{"class":1212},[1198,1915,1748],{"class":1208},[1198,1917,1751],{"class":1212},[1198,1919,1920],{"class":1200,"line":1257},[1198,1921,1362],{"emptyLinePlaceholder":1361},[1198,1923,1924,1927,1929,1931,1934,1936,1938,1941,1943,1945,1947,1949,1951,1953,1955,1957,1959,1961,1963,1965,1968,1970,1972,1974,1976,1978,1981,1983,1985,1987,1989,1991,1994,1996,1998],{"class":1200,"line":1277},[1198,1925,1926],{"class":1204},"await",[1198,1928,1711],{"class":1212},[1198,1930,1774],{"class":1208},[1198,1932,1933],{"class":1560},"put",[1198,1935,1563],{"class":1212},[1198,1937,1597],{"class":1208},[1198,1939,1940],{"class":1231},"e1",[1198,1942,1597],{"class":1208},[1198,1944,1216],{"class":1208},[1198,1946,1209],{"class":1208},[1198,1948,1379],{"class":1378},[1198,1950,1382],{"class":1208},[1198,1952,1228],{"class":1208},[1198,1954,1940],{"class":1231},[1198,1956,1597],{"class":1208},[1198,1958,1216],{"class":1208},[1198,1960,1391],{"class":1378},[1198,1962,1382],{"class":1208},[1198,1964,1228],{"class":1208},[1198,1966,1967],{"class":1231},"Dana Lopez",[1198,1969,1597],{"class":1208},[1198,1971,1216],{"class":1208},[1198,1973,1400],{"class":1378},[1198,1975,1382],{"class":1208},[1198,1977,1228],{"class":1208},[1198,1979,1980],{"class":1231},"Engineer",[1198,1982,1597],{"class":1208},[1198,1984,1216],{"class":1208},[1198,1986,1409],{"class":1378},[1198,1988,1382],{"class":1208},[1198,1990,1228],{"class":1208},[1198,1992,1993],{"class":1231},"2024-02-01",[1198,1995,1597],{"class":1208},[1198,1997,1222],{"class":1208},[1198,1999,1751],{"class":1212},[1198,2001,2002,2004,2006,2008,2010,2012,2014,2016,2018,2020,2022,2024,2026,2028,2030,2032,2034,2036,2038,2040,2043,2045,2047,2049,2051,2053,2056,2058,2061],{"class":1200,"line":1297},[1198,2003,1926],{"class":1204},[1198,2005,1725],{"class":1212},[1198,2007,1774],{"class":1208},[1198,2009,1803],{"class":1560},[1198,2011,1563],{"class":1212},[1198,2013,1597],{"class":1208},[1198,2015,1940],{"class":1231},[1198,2017,1597],{"class":1208},[1198,2019,1216],{"class":1208},[1198,2021,1209],{"class":1208},[1198,2023,1379],{"class":1378},[1198,2025,1382],{"class":1208},[1198,2027,1228],{"class":1208},[1198,2029,1940],{"class":1231},[1198,2031,1597],{"class":1208},[1198,2033,1216],{"class":1208},[1198,2035,1437],{"class":1378},[1198,2037,1382],{"class":1208},[1198,2039,1228],{"class":1208},[1198,2041,2042],{"class":1231},"145000",[1198,2044,1597],{"class":1208},[1198,2046,1216],{"class":1208},[1198,2048,1446],{"class":1378},[1198,2050,1382],{"class":1208},[1198,2052,1228],{"class":1208},[1198,2054,2055],{"class":1231},"strong Q1",[1198,2057,1597],{"class":1208},[1198,2059,2060],{"class":1208}," },",[1198,2062,2063],{"class":1212}," CONFIDENTIAL)\n",[1198,2065,2066],{"class":1200,"line":1317},[1198,2067,1362],{"emptyLinePlaceholder":1361},[1198,2069,2070,2072,2074,2076,2079,2081,2083,2085,2087,2090],{"class":1200,"line":1337},[1198,2071,1926],{"class":1204},[1198,2073,1711],{"class":1212},[1198,2075,1774],{"class":1208},[1198,2077,2078],{"class":1560},"get",[1198,2080,1563],{"class":1212},[1198,2082,1597],{"class":1208},[1198,2084,1940],{"class":1231},[1198,2086,1597],{"class":1208},[1198,2088,2089],{"class":1212},")     ",[1198,2091,2093],{"class":2092},"sHwdD","\u002F\u002F → { …, role: 'Engineer' } — tier-0 basics, readable\n",[1198,2095,2096,2098,2100,2102,2104,2106,2108,2110,2112,2115],{"class":1200,"line":1358},[1198,2097,1926],{"class":1204},[1198,2099,1725],{"class":1212},[1198,2101,1774],{"class":1208},[1198,2103,2078],{"class":1560},[1198,2105,1563],{"class":1212},[1198,2107,1597],{"class":1208},[1198,2109,1940],{"class":1231},[1198,2111,1597],{"class":1208},[1198,2113,2114],{"class":1212},")      ",[1198,2116,2117],{"class":2092},"\u002F\u002F → null — the read gate runs off the live `_tier` header before any decrypt\n",[941,2119,2120,2121,2124,2125,2128,2129,2131],{},"A plain ",[953,2122,2123],{},"get()"," on a confidential record returns ",[953,2126,2127],{},"null"," for a below-tier caller — it is treated as absent, not refused. The sanctioned way to read above your inherent tier is ",[953,2130,1115],{},", which succeeds for a caller who holds the tier DEK (here, the owner) and fires a cross-tier access event:",[1189,2133,2135],{"className":1191,"code":2134,"language":1193,"meta":1194,"style":1194},"await salaries.getAtTier('e1') \u002F\u002F → { employeeId: 'e1', amount: '145000', notes: 'strong Q1' }\n",[953,2136,2137],{"__ignoreMap":1194},[1198,2138,2139,2141,2143,2145,2148,2150,2152,2154,2156,2159],{"class":1200,"line":1201},[1198,2140,1926],{"class":1204},[1198,2142,1725],{"class":1212},[1198,2144,1774],{"class":1208},[1198,2146,2147],{"class":1560},"getAtTier",[1198,2149,1563],{"class":1212},[1198,2151,1597],{"class":1208},[1198,2153,1940],{"class":1231},[1198,2155,1597],{"class":1208},[1198,2157,2158],{"class":1212},") ",[1198,2160,2161],{"class":2092},"\u002F\u002F → { employeeId: 'e1', amount: '145000', notes: 'strong Q1' }\n",[1013,2163,2165],{"id":2164},"scoped-elevation-a-ttl-bound-privileged-write","Scoped elevation — a TTL-bound privileged write",[941,2167,2168,2169,2172,2173,2175,2176,2179],{},"To ",[1797,2170,2171],{},"update"," a salary, a session briefly elevates. ",[953,2174,1125],{}," returns a handle whose ",[944,2177,2178],{},"writes"," land at the elevated tier; reads on the original vault stay at the caller's inherent tier.",[1189,2181,2183],{"className":1191,"code":2182,"language":1193,"meta":1194,"style":1194},"const elevated = await vault.elevate(CONFIDENTIAL, {\n  ttlMs: 15 * 60_000,\n  reason: 'annual review adjustment',\n})\n\u002F\u002F → ElevatedHandle { tier: 1, reason: 'annual review adjustment', expiresAt: \u003Cnow + ttlMs> }\n\nawait elevated.collection\u003CSalary>('salaries').put('e1', {\n  employeeId: 'e1', amount: '152000', notes: 'raise approved',\n})\nawait salaries.getAtTier('e1') \u002F\u002F → { …, amount: '152000' }\n",[953,2184,2185,2211,2229,2245,2251,2256,2260,2303,2344,2350],{"__ignoreMap":1194},[1198,2186,2187,2189,2192,2194,2196,2198,2200,2203,2206,2208],{"class":1200,"line":1201},[1198,2188,1516],{"class":1368},[1198,2190,2191],{"class":1212}," elevated ",[1198,2193,1522],{"class":1208},[1198,2195,1557],{"class":1204},[1198,2197,1824],{"class":1212},[1198,2199,1774],{"class":1208},[1198,2201,2202],{"class":1560},"elevate",[1198,2204,2205],{"class":1212},"(CONFIDENTIAL",[1198,2207,1216],{"class":1208},[1198,2209,2210],{"class":1208}," {\n",[1198,2212,2213,2216,2218,2221,2224,2227],{"class":1200,"line":1237},[1198,2214,2215],{"class":1378},"  ttlMs",[1198,2217,1382],{"class":1208},[1198,2219,2220],{"class":1525}," 15",[1198,2222,2223],{"class":1208}," *",[1198,2225,2226],{"class":1525}," 60_000",[1198,2228,1582],{"class":1208},[1198,2230,2231,2234,2236,2238,2241,2243],{"class":1200,"line":1257},[1198,2232,2233],{"class":1378},"  reason",[1198,2235,1382],{"class":1208},[1198,2237,1228],{"class":1208},[1198,2239,2240],{"class":1231},"annual review adjustment",[1198,2242,1597],{"class":1208},[1198,2244,1582],{"class":1208},[1198,2246,2247,2249],{"class":1200,"line":1277},[1198,2248,1748],{"class":1208},[1198,2250,1751],{"class":1212},[1198,2252,2253],{"class":1200,"line":1297},[1198,2254,2255],{"class":2092},"\u002F\u002F → ElevatedHandle { tier: 1, reason: 'annual review adjustment', expiresAt: \u003Cnow + ttlMs> }\n",[1198,2257,2258],{"class":1200,"line":1317},[1198,2259,1362],{"emptyLinePlaceholder":1361},[1198,2261,2262,2264,2267,2269,2271,2273,2275,2277,2279,2281,2283,2285,2287,2289,2291,2293,2295,2297,2299,2301],{"class":1200,"line":1337},[1198,2263,1926],{"class":1204},[1198,2265,2266],{"class":1212}," elevated",[1198,2268,1774],{"class":1208},[1198,2270,1829],{"class":1560},[1198,2272,1832],{"class":1208},[1198,2274,1888],{"class":1372},[1198,2276,1838],{"class":1208},[1198,2278,1563],{"class":1212},[1198,2280,1597],{"class":1208},[1198,2282,1897],{"class":1231},[1198,2284,1597],{"class":1208},[1198,2286,1740],{"class":1212},[1198,2288,1774],{"class":1208},[1198,2290,1933],{"class":1560},[1198,2292,1563],{"class":1212},[1198,2294,1597],{"class":1208},[1198,2296,1940],{"class":1231},[1198,2298,1597],{"class":1208},[1198,2300,1216],{"class":1208},[1198,2302,2210],{"class":1208},[1198,2304,2305,2308,2310,2312,2314,2316,2318,2320,2322,2324,2327,2329,2331,2333,2335,2337,2340,2342],{"class":1200,"line":1358},[1198,2306,2307],{"class":1378},"  employeeId",[1198,2309,1382],{"class":1208},[1198,2311,1228],{"class":1208},[1198,2313,1940],{"class":1231},[1198,2315,1597],{"class":1208},[1198,2317,1216],{"class":1208},[1198,2319,1437],{"class":1378},[1198,2321,1382],{"class":1208},[1198,2323,1228],{"class":1208},[1198,2325,2326],{"class":1231},"152000",[1198,2328,1597],{"class":1208},[1198,2330,1216],{"class":1208},[1198,2332,1446],{"class":1378},[1198,2334,1382],{"class":1208},[1198,2336,1228],{"class":1208},[1198,2338,2339],{"class":1231},"raise approved",[1198,2341,1597],{"class":1208},[1198,2343,1582],{"class":1208},[1198,2345,2346,2348],{"class":1200,"line":1365},[1198,2347,1748],{"class":1208},[1198,2349,1751],{"class":1212},[1198,2351,2352,2354,2356,2358,2360,2362,2364,2366,2368,2370],{"class":1200,"line":1419},[1198,2353,1926],{"class":1204},[1198,2355,1725],{"class":1212},[1198,2357,1774],{"class":1208},[1198,2359,2147],{"class":1560},[1198,2361,1563],{"class":1212},[1198,2363,1597],{"class":1208},[1198,2365,1940],{"class":1231},[1198,2367,1597],{"class":1208},[1198,2369,2158],{"class":1212},[1198,2371,2372],{"class":2092},"\u002F\u002F → { …, amount: '152000' }\n",[941,2374,2375,2376,2379,2380,2383,2384,2387,2388,2391,2392,2394,2395,2398],{},"Only one elevation may be live per vault — a second ",[953,2377,2378],{},"vault.elevate(...)"," throws ",[953,2381,2382],{},"AlreadyElevatedError",". The TTL is enforced lazily: the handle checks ",[953,2385,2386],{},"expiresAt"," on every operation, so a forgotten ",[953,2389,2390],{},"release()"," cannot keep elevated writes alive. Calling ",[953,2393,2390],{}," (or letting ",[953,2396,2397],{},"ttlMs"," elapse) makes the handle inert, and the next write through it throws:",[1189,2400,2402],{"className":1191,"code":2401,"language":1193,"meta":1194,"style":1194},"await elevated.release()\nawait elevated.collection\u003CSalary>('salaries').put('e1', { \u002F* … *\u002F })\n\u002F\u002F → throws ElevationExpiredError\n",[953,2403,2404,2418,2467],{"__ignoreMap":1194},[1198,2405,2406,2408,2410,2412,2415],{"class":1200,"line":1201},[1198,2407,1926],{"class":1204},[1198,2409,2266],{"class":1212},[1198,2411,1774],{"class":1208},[1198,2413,2414],{"class":1560},"release",[1198,2416,2417],{"class":1212},"()\n",[1198,2419,2420,2422,2424,2426,2428,2430,2432,2434,2436,2438,2440,2442,2444,2446,2448,2450,2452,2454,2456,2458,2460,2463,2465],{"class":1200,"line":1237},[1198,2421,1926],{"class":1204},[1198,2423,2266],{"class":1212},[1198,2425,1774],{"class":1208},[1198,2427,1829],{"class":1560},[1198,2429,1832],{"class":1208},[1198,2431,1888],{"class":1372},[1198,2433,1838],{"class":1208},[1198,2435,1563],{"class":1212},[1198,2437,1597],{"class":1208},[1198,2439,1897],{"class":1231},[1198,2441,1597],{"class":1208},[1198,2443,1740],{"class":1212},[1198,2445,1774],{"class":1208},[1198,2447,1933],{"class":1560},[1198,2449,1563],{"class":1212},[1198,2451,1597],{"class":1208},[1198,2453,1940],{"class":1231},[1198,2455,1597],{"class":1208},[1198,2457,1216],{"class":1208},[1198,2459,1209],{"class":1208},[1198,2461,2462],{"class":2092}," \u002F* … *\u002F",[1198,2464,1222],{"class":1208},[1198,2466,1751],{"class":1212},[1198,2468,2469],{"class":1200,"line":1257},[1198,2470,2471],{"class":2092},"\u002F\u002F → throws ElevationExpiredError\n",[1013,2473,2475],{"id":2474},"delegation-scoped-access-for-a-payroll-reviewer","Delegation — scoped access for a payroll reviewer",[941,2477,2478,2479,2481],{},"A reviewer who needs the confidential tier without a standing grant gets a time-boxed delegation. The reviewer must already have a keyring in the vault, so grant them in first (",[953,2480,963],{},"), then delegate:",[1189,2483,2485],{"className":1191,"code":2484,"language":1193,"meta":1194,"style":1194},"await db.grant('acme-hr', {\n  userId: 'payroll', displayName: 'Payroll Reviewer', role: 'operator', secret: 'payroll-pass-2026',\n})\n\nconst token = await vault.delegate({\n  toUser: 'payroll',\n  tier: CONFIDENTIAL,\n  collection: 'salaries',\n  until: new Date(Date.now() + 60 * 60_000),\n})\n\u002F\u002F → DelegationToken { id, toUser: 'payroll', fromUser: 'hr-admin', tier: 1,\n\u002F\u002F                     collection: 'salaries', wrappedDek, sealedCek, until, createdAt }\n",[953,2486,2487,2510,2567,2573,2577,2599,2614,2626,2641,2679,2685,2690],{"__ignoreMap":1194},[1198,2488,2489,2491,2493,2495,2498,2500,2502,2504,2506,2508],{"class":1200,"line":1201},[1198,2490,1926],{"class":1204},[1198,2492,1771],{"class":1212},[1198,2494,1774],{"class":1208},[1198,2496,2497],{"class":1560},"grant",[1198,2499,1563],{"class":1212},[1198,2501,1597],{"class":1208},[1198,2503,1784],{"class":1231},[1198,2505,1597],{"class":1208},[1198,2507,1216],{"class":1208},[1198,2509,2210],{"class":1208},[1198,2511,2512,2515,2517,2519,2522,2524,2526,2529,2531,2533,2536,2538,2540,2542,2544,2546,2549,2551,2553,2556,2558,2560,2563,2565],{"class":1200,"line":1237},[1198,2513,2514],{"class":1378},"  userId",[1198,2516,1382],{"class":1208},[1198,2518,1228],{"class":1208},[1198,2520,2521],{"class":1231},"payroll",[1198,2523,1597],{"class":1208},[1198,2525,1216],{"class":1208},[1198,2527,2528],{"class":1378}," displayName",[1198,2530,1382],{"class":1208},[1198,2532,1228],{"class":1208},[1198,2534,2535],{"class":1231},"Payroll Reviewer",[1198,2537,1597],{"class":1208},[1198,2539,1216],{"class":1208},[1198,2541,1400],{"class":1378},[1198,2543,1382],{"class":1208},[1198,2545,1228],{"class":1208},[1198,2547,2548],{"class":1231},"operator",[1198,2550,1597],{"class":1208},[1198,2552,1216],{"class":1208},[1198,2554,2555],{"class":1378}," secret",[1198,2557,1382],{"class":1208},[1198,2559,1228],{"class":1208},[1198,2561,2562],{"class":1231},"payroll-pass-2026",[1198,2564,1597],{"class":1208},[1198,2566,1582],{"class":1208},[1198,2568,2569,2571],{"class":1200,"line":1257},[1198,2570,1748],{"class":1208},[1198,2572,1751],{"class":1212},[1198,2574,2575],{"class":1200,"line":1277},[1198,2576,1362],{"emptyLinePlaceholder":1361},[1198,2578,2579,2581,2584,2586,2588,2590,2592,2595,2597],{"class":1200,"line":1297},[1198,2580,1516],{"class":1368},[1198,2582,2583],{"class":1212}," token ",[1198,2585,1522],{"class":1208},[1198,2587,1557],{"class":1204},[1198,2589,1824],{"class":1212},[1198,2591,1774],{"class":1208},[1198,2593,2594],{"class":1560},"delegate",[1198,2596,1563],{"class":1212},[1198,2598,1566],{"class":1208},[1198,2600,2601,2604,2606,2608,2610,2612],{"class":1200,"line":1317},[1198,2602,2603],{"class":1378},"  toUser",[1198,2605,1382],{"class":1208},[1198,2607,1228],{"class":1208},[1198,2609,2521],{"class":1231},[1198,2611,1597],{"class":1208},[1198,2613,1582],{"class":1208},[1198,2615,2616,2619,2621,2624],{"class":1200,"line":1337},[1198,2617,2618],{"class":1378},"  tier",[1198,2620,1382],{"class":1208},[1198,2622,2623],{"class":1212}," CONFIDENTIAL",[1198,2625,1582],{"class":1208},[1198,2627,2628,2631,2633,2635,2637,2639],{"class":1200,"line":1358},[1198,2629,2630],{"class":1378},"  collection",[1198,2632,1382],{"class":1208},[1198,2634,1228],{"class":1208},[1198,2636,1897],{"class":1231},[1198,2638,1597],{"class":1208},[1198,2640,1582],{"class":1208},[1198,2642,2643,2646,2648,2651,2654,2657,2659,2662,2665,2668,2671,2673,2675,2677],{"class":1200,"line":1365},[1198,2644,2645],{"class":1378},"  until",[1198,2647,1382],{"class":1208},[1198,2649,2650],{"class":1208}," new",[1198,2652,2653],{"class":1560}," Date",[1198,2655,2656],{"class":1212},"(Date",[1198,2658,1774],{"class":1208},[1198,2660,2661],{"class":1560},"now",[1198,2663,2664],{"class":1212},"() ",[1198,2666,2667],{"class":1208},"+",[1198,2669,2670],{"class":1525}," 60",[1198,2672,2223],{"class":1208},[1198,2674,2226],{"class":1525},[1198,2676,1740],{"class":1212},[1198,2678,1582],{"class":1208},[1198,2680,2681,2683],{"class":1200,"line":1419},[1198,2682,1748],{"class":1208},[1198,2684,1751],{"class":1212},[1198,2686,2687],{"class":1200,"line":1455},[1198,2688,2689],{"class":2092},"\u002F\u002F → DelegationToken { id, toUser: 'payroll', fromUser: 'hr-admin', tier: 1,\n",[1198,2691,2692],{"class":1200,"line":1482},[1198,2693,2694],{"class":2092},"\u002F\u002F                     collection: 'salaries', wrappedDek, sealedCek, until, createdAt }\n",[941,2696,2697,2698,2700,2701,2704,2705,2708,2709,2711,2712,2715,2716,2719],{},"Naming ",[953,2699,1829],{}," makes this the ",[944,2702,2703],{},"per-collection"," form, so the token carries a single\n",[953,2706,2707],{},"wrappedDek",". Omit ",[953,2710,1829],{}," and you get the collection-wide form instead — a ",[953,2713,2714],{},"wrappedDeks","\nmap covering every collection the grantor held at that tier ",[1797,2717,2718],{},"when the token was issued",". For a\nreviewer who only needs salaries, name the collection: it is the narrower grant.",[941,2721,2722,2723,2726,2727,2729,2730,2733,2734,2737,2738,2741,2742,2744],{},"The tier DEK is wrapped under a per-token content key, and that key is sealed to the reviewer's\ninbox public half (",[953,2724,2725],{},"sealedCek",") — so ",[953,2728,1063],{}," delegates without knowing anything of the\nreviewer's secret. The reviewer's side then calls ",[953,2731,2732],{},"vault.refreshDelegations()"," to merge it,\nwhich grants a cleared read until ",[953,2735,2736],{},"until"," passes; ",[953,2739,2740],{},"vault.revokeDelegation(token.id)"," cancels it\nearly. Merging is explicit — opening the vault does not do it, and ",[996,2743,872],{"href":873}," says\nwhy. The runnable test asserts issuance and the token's shape; the cross-session merge is a\nsecond-session concern beyond one in-memory process.",[1013,2746,2748],{"id":2747},"tier-aware-search-elevated-records-are-skipped-not-refused","Tier-aware search — elevated records are skipped, not refused",[941,2750,2751,2752,2754,2755,2758],{},"A collection with an ",[953,2753,1152],{}," encoder derives a ",[953,2756,2757],{},"_vec"," sidecar per record. Elevating a record purges that sidecar: it is no longer searchable above tier 0, and a below-tier search simply omits it — no error.",[1189,2760,2762],{"className":1191,"code":2761,"language":1193,"meta":1194,"style":1194},"const reviews = vault.collection\u003CReview>('reviews', { tiers: [PUBLIC, CONFIDENTIAL], embeddings: enc() })\n\nawait reviews.put('r1', { employeeId: 'e1', notes: 'strong performer bonus recommended' })\nawait reviews.put('r2', { employeeId: 'e2', notes: 'strong performer bonus recommended' })\nawait reviews.elevate('r1', CONFIDENTIAL)\n\nconst hits = await reviews.retrieve('strong performer bonus', { mode: 'semantic' })\nhits.map((h) => h.id) \u002F\u002F → ['r2'] — the elevated r1 is absent, not an error\n",[953,2763,2764,2826,2830,2881,2931,2953,2957,3004],{"__ignoreMap":1194},[1198,2765,2766,2768,2771,2773,2775,2777,2779,2781,2784,2786,2788,2790,2793,2795,2797,2799,2801,2803,2805,2807,2810,2812,2815,2817,2820,2822,2824],{"class":1200,"line":1201},[1198,2767,1516],{"class":1368},[1198,2769,2770],{"class":1212}," reviews ",[1198,2772,1522],{"class":1208},[1198,2774,1824],{"class":1212},[1198,2776,1774],{"class":1208},[1198,2778,1829],{"class":1560},[1198,2780,1832],{"class":1208},[1198,2782,2783],{"class":1372},"Review",[1198,2785,1838],{"class":1208},[1198,2787,1563],{"class":1212},[1198,2789,1597],{"class":1208},[1198,2791,2792],{"class":1231},"reviews",[1198,2794,1597],{"class":1208},[1198,2796,1216],{"class":1208},[1198,2798,1209],{"class":1208},[1198,2800,1854],{"class":1378},[1198,2802,1382],{"class":1208},[1198,2804,1859],{"class":1212},[1198,2806,1216],{"class":1208},[1198,2808,2809],{"class":1212}," CONFIDENTIAL]",[1198,2811,1216],{"class":1208},[1198,2813,2814],{"class":1378}," embeddings",[1198,2816,1382],{"class":1208},[1198,2818,2819],{"class":1560}," enc",[1198,2821,2664],{"class":1212},[1198,2823,1748],{"class":1208},[1198,2825,1751],{"class":1212},[1198,2827,2828],{"class":1200,"line":1237},[1198,2829,1362],{"emptyLinePlaceholder":1361},[1198,2831,2832,2834,2837,2839,2841,2843,2845,2848,2850,2852,2854,2856,2858,2860,2862,2864,2866,2868,2870,2872,2875,2877,2879],{"class":1200,"line":1257},[1198,2833,1926],{"class":1204},[1198,2835,2836],{"class":1212}," reviews",[1198,2838,1774],{"class":1208},[1198,2840,1933],{"class":1560},[1198,2842,1563],{"class":1212},[1198,2844,1597],{"class":1208},[1198,2846,2847],{"class":1231},"r1",[1198,2849,1597],{"class":1208},[1198,2851,1216],{"class":1208},[1198,2853,1209],{"class":1208},[1198,2855,1379],{"class":1378},[1198,2857,1382],{"class":1208},[1198,2859,1228],{"class":1208},[1198,2861,1940],{"class":1231},[1198,2863,1597],{"class":1208},[1198,2865,1216],{"class":1208},[1198,2867,1446],{"class":1378},[1198,2869,1382],{"class":1208},[1198,2871,1228],{"class":1208},[1198,2873,2874],{"class":1231},"strong performer bonus recommended",[1198,2876,1597],{"class":1208},[1198,2878,1222],{"class":1208},[1198,2880,1751],{"class":1212},[1198,2882,2883,2885,2887,2889,2891,2893,2895,2898,2900,2902,2904,2906,2908,2910,2913,2915,2917,2919,2921,2923,2925,2927,2929],{"class":1200,"line":1277},[1198,2884,1926],{"class":1204},[1198,2886,2836],{"class":1212},[1198,2888,1774],{"class":1208},[1198,2890,1933],{"class":1560},[1198,2892,1563],{"class":1212},[1198,2894,1597],{"class":1208},[1198,2896,2897],{"class":1231},"r2",[1198,2899,1597],{"class":1208},[1198,2901,1216],{"class":1208},[1198,2903,1209],{"class":1208},[1198,2905,1379],{"class":1378},[1198,2907,1382],{"class":1208},[1198,2909,1228],{"class":1208},[1198,2911,2912],{"class":1231},"e2",[1198,2914,1597],{"class":1208},[1198,2916,1216],{"class":1208},[1198,2918,1446],{"class":1378},[1198,2920,1382],{"class":1208},[1198,2922,1228],{"class":1208},[1198,2924,2874],{"class":1231},[1198,2926,1597],{"class":1208},[1198,2928,1222],{"class":1208},[1198,2930,1751],{"class":1212},[1198,2932,2933,2935,2937,2939,2941,2943,2945,2947,2949,2951],{"class":1200,"line":1297},[1198,2934,1926],{"class":1204},[1198,2936,2836],{"class":1212},[1198,2938,1774],{"class":1208},[1198,2940,2202],{"class":1560},[1198,2942,1563],{"class":1212},[1198,2944,1597],{"class":1208},[1198,2946,2847],{"class":1231},[1198,2948,1597],{"class":1208},[1198,2950,1216],{"class":1208},[1198,2952,2063],{"class":1212},[1198,2954,2955],{"class":1200,"line":1317},[1198,2956,1362],{"emptyLinePlaceholder":1361},[1198,2958,2959,2961,2964,2966,2968,2970,2972,2975,2977,2979,2982,2984,2986,2988,2991,2993,2995,2998,3000,3002],{"class":1200,"line":1337},[1198,2960,1516],{"class":1368},[1198,2962,2963],{"class":1212}," hits ",[1198,2965,1522],{"class":1208},[1198,2967,1557],{"class":1204},[1198,2969,2836],{"class":1212},[1198,2971,1774],{"class":1208},[1198,2973,2974],{"class":1560},"retrieve",[1198,2976,1563],{"class":1212},[1198,2978,1597],{"class":1208},[1198,2980,2981],{"class":1231},"strong performer bonus",[1198,2983,1597],{"class":1208},[1198,2985,1216],{"class":1208},[1198,2987,1209],{"class":1208},[1198,2989,2990],{"class":1378}," mode",[1198,2992,1382],{"class":1208},[1198,2994,1228],{"class":1208},[1198,2996,2997],{"class":1231},"semantic",[1198,2999,1597],{"class":1208},[1198,3001,1222],{"class":1208},[1198,3003,1751],{"class":1212},[1198,3005,3006,3009,3011,3014,3016,3018,3022,3024,3027,3030,3032,3035],{"class":1200,"line":1358},[1198,3007,3008],{"class":1212},"hits",[1198,3010,1774],{"class":1208},[1198,3012,3013],{"class":1560},"map",[1198,3015,1563],{"class":1212},[1198,3017,1563],{"class":1208},[1198,3019,3021],{"class":3020},"sHdIc","h",[1198,3023,1740],{"class":1208},[1198,3025,3026],{"class":1368}," =>",[1198,3028,3029],{"class":1212}," h",[1198,3031,1774],{"class":1208},[1198,3033,3034],{"class":1212},"id) ",[1198,3036,3037],{"class":2092},"\u002F\u002F → ['r2'] — the elevated r1 is absent, not an error\n",[941,3039,3040,3041,3044],{},"A bulk re-derive counts the elevated record in ",[953,3042,3043],{},"skipped"," rather than writing a searchable sidecar above tier 0:",[1189,3046,3048],{"className":1191,"code":3047,"language":1193,"meta":1194,"style":1194},"await reviews.rebuildEmbeddings() \u002F\u002F → { rebuilt: 1, skipped: 1 }\n",[953,3049,3050],{"__ignoreMap":1194},[1198,3051,3052,3054,3056,3058,3061,3063],{"class":1200,"line":1201},[1198,3053,1926],{"class":1204},[1198,3055,2836],{"class":1212},[1198,3057,1774],{"class":1208},[1198,3059,3060],{"class":1560},"rebuildEmbeddings",[1198,3062,2664],{"class":1212},[1198,3064,3065],{"class":2092},"\u002F\u002F → { rebuilt: 1, skipped: 1 }\n",[941,3067,1563,3068,3071,3072,3075,3076,3078],{},[953,3069,3070],{},"enc()"," is any encoder returning a ",[953,3073,3074],{},"Float32Array","; the test uses a deterministic stub — see ",[996,3077,673],{"href":674}," for real encoders.)",[1013,3080,3082],{"id":3081},"tiered-blobs-a-contract-that-follows-its-record","Tiered blobs — a contract that follows its record",[941,3084,3085,3086,3089,3090,3092],{},"A signed contract PDF is a blob owned by an employee record. On a ",[953,3087,3088],{},"perRecordKeys"," collection with ",[953,3091,1056],{},", the blob's storage tier follows its owning record.",[1189,3094,3096],{"className":1191,"code":3095,"language":1193,"meta":1194,"style":1194},"const contracts = vault.collection\u003CContract>('contracts', {\n  tiers: [PUBLIC, CONFIDENTIAL],\n  perRecordKeys: true,\n  blobTierPolicy: 'isolate',\n})\n\nawait contracts.put('c1', { employeeId: 'e1', title: 'Signed offer letter' })\nconst pdf = new Uint8Array([0x25, 0x50, 0x44, 0x46, 0x2d, 0x31, 0x2e, 0x37]) \u002F\u002F \"%PDF-1.7\"\nawait contracts.blob('c1').put('contract', pdf, { mimeType: 'application\u002Fpdf' })\n\nawait contracts.elevate('c1', CONFIDENTIAL)\nawait contracts.get('c1')                \u002F\u002F → null — record gated\nawait contracts.blob('c1').get('contract') \u002F\u002F → null — the tier-0 blob surface is gated too\n",[953,3097,3098,3133,3148,3161,3177,3183,3187,3238,3299,3357,3361,3383,3407],{"__ignoreMap":1194},[1198,3099,3100,3102,3105,3107,3109,3111,3113,3115,3118,3120,3122,3124,3127,3129,3131],{"class":1200,"line":1201},[1198,3101,1516],{"class":1368},[1198,3103,3104],{"class":1212}," contracts ",[1198,3106,1522],{"class":1208},[1198,3108,1824],{"class":1212},[1198,3110,1774],{"class":1208},[1198,3112,1829],{"class":1560},[1198,3114,1832],{"class":1208},[1198,3116,3117],{"class":1372},"Contract",[1198,3119,1838],{"class":1208},[1198,3121,1563],{"class":1212},[1198,3123,1597],{"class":1208},[1198,3125,3126],{"class":1231},"contracts",[1198,3128,1597],{"class":1208},[1198,3130,1216],{"class":1208},[1198,3132,2210],{"class":1208},[1198,3134,3135,3138,3140,3142,3144,3146],{"class":1200,"line":1237},[1198,3136,3137],{"class":1378},"  tiers",[1198,3139,1382],{"class":1208},[1198,3141,1859],{"class":1212},[1198,3143,1216],{"class":1208},[1198,3145,2809],{"class":1212},[1198,3147,1582],{"class":1208},[1198,3149,3150,3153,3155,3159],{"class":1200,"line":1257},[1198,3151,3152],{"class":1378},"  perRecordKeys",[1198,3154,1382],{"class":1208},[1198,3156,3158],{"class":3157},"sfNiH"," true",[1198,3160,1582],{"class":1208},[1198,3162,3163,3166,3168,3170,3173,3175],{"class":1200,"line":1277},[1198,3164,3165],{"class":1378},"  blobTierPolicy",[1198,3167,1382],{"class":1208},[1198,3169,1228],{"class":1208},[1198,3171,3172],{"class":1231},"isolate",[1198,3174,1597],{"class":1208},[1198,3176,1582],{"class":1208},[1198,3178,3179,3181],{"class":1200,"line":1297},[1198,3180,1748],{"class":1208},[1198,3182,1751],{"class":1212},[1198,3184,3185],{"class":1200,"line":1317},[1198,3186,1362],{"emptyLinePlaceholder":1361},[1198,3188,3189,3191,3194,3196,3198,3200,3202,3205,3207,3209,3211,3213,3215,3217,3219,3221,3223,3225,3227,3229,3232,3234,3236],{"class":1200,"line":1337},[1198,3190,1926],{"class":1204},[1198,3192,3193],{"class":1212}," contracts",[1198,3195,1774],{"class":1208},[1198,3197,1933],{"class":1560},[1198,3199,1563],{"class":1212},[1198,3201,1597],{"class":1208},[1198,3203,3204],{"class":1231},"c1",[1198,3206,1597],{"class":1208},[1198,3208,1216],{"class":1208},[1198,3210,1209],{"class":1208},[1198,3212,1379],{"class":1378},[1198,3214,1382],{"class":1208},[1198,3216,1228],{"class":1208},[1198,3218,1940],{"class":1231},[1198,3220,1597],{"class":1208},[1198,3222,1216],{"class":1208},[1198,3224,1473],{"class":1378},[1198,3226,1382],{"class":1208},[1198,3228,1228],{"class":1208},[1198,3230,3231],{"class":1231},"Signed offer letter",[1198,3233,1597],{"class":1208},[1198,3235,1222],{"class":1208},[1198,3237,1751],{"class":1212},[1198,3239,3240,3242,3245,3247,3249,3252,3255,3258,3260,3263,3265,3268,3270,3273,3275,3278,3280,3283,3285,3288,3290,3293,3296],{"class":1200,"line":1358},[1198,3241,1516],{"class":1368},[1198,3243,3244],{"class":1212}," pdf ",[1198,3246,1522],{"class":1208},[1198,3248,2650],{"class":1208},[1198,3250,3251],{"class":1560}," Uint8Array",[1198,3253,3254],{"class":1212},"([",[1198,3256,3257],{"class":1525},"0x25",[1198,3259,1216],{"class":1208},[1198,3261,3262],{"class":1525}," 0x50",[1198,3264,1216],{"class":1208},[1198,3266,3267],{"class":1525}," 0x44",[1198,3269,1216],{"class":1208},[1198,3271,3272],{"class":1525}," 0x46",[1198,3274,1216],{"class":1208},[1198,3276,3277],{"class":1525}," 0x2d",[1198,3279,1216],{"class":1208},[1198,3281,3282],{"class":1525}," 0x31",[1198,3284,1216],{"class":1208},[1198,3286,3287],{"class":1525}," 0x2e",[1198,3289,1216],{"class":1208},[1198,3291,3292],{"class":1525}," 0x37",[1198,3294,3295],{"class":1212},"]) ",[1198,3297,3298],{"class":2092},"\u002F\u002F \"%PDF-1.7\"\n",[1198,3300,3301,3303,3305,3307,3309,3311,3313,3315,3317,3319,3321,3323,3325,3327,3330,3332,3334,3337,3339,3341,3344,3346,3348,3351,3353,3355],{"class":1200,"line":1365},[1198,3302,1926],{"class":1204},[1198,3304,3193],{"class":1212},[1198,3306,1774],{"class":1208},[1198,3308,133],{"class":1560},[1198,3310,1563],{"class":1212},[1198,3312,1597],{"class":1208},[1198,3314,3204],{"class":1231},[1198,3316,1597],{"class":1208},[1198,3318,1740],{"class":1212},[1198,3320,1774],{"class":1208},[1198,3322,1933],{"class":1560},[1198,3324,1563],{"class":1212},[1198,3326,1597],{"class":1208},[1198,3328,3329],{"class":1231},"contract",[1198,3331,1597],{"class":1208},[1198,3333,1216],{"class":1208},[1198,3335,3336],{"class":1212}," pdf",[1198,3338,1216],{"class":1208},[1198,3340,1209],{"class":1208},[1198,3342,3343],{"class":1378}," mimeType",[1198,3345,1382],{"class":1208},[1198,3347,1228],{"class":1208},[1198,3349,3350],{"class":1231},"application\u002Fpdf",[1198,3352,1597],{"class":1208},[1198,3354,1222],{"class":1208},[1198,3356,1751],{"class":1212},[1198,3358,3359],{"class":1200,"line":1419},[1198,3360,1362],{"emptyLinePlaceholder":1361},[1198,3362,3363,3365,3367,3369,3371,3373,3375,3377,3379,3381],{"class":1200,"line":1455},[1198,3364,1926],{"class":1204},[1198,3366,3193],{"class":1212},[1198,3368,1774],{"class":1208},[1198,3370,2202],{"class":1560},[1198,3372,1563],{"class":1212},[1198,3374,1597],{"class":1208},[1198,3376,3204],{"class":1231},[1198,3378,1597],{"class":1208},[1198,3380,1216],{"class":1208},[1198,3382,2063],{"class":1212},[1198,3384,3385,3387,3389,3391,3393,3395,3397,3399,3401,3404],{"class":1200,"line":1482},[1198,3386,1926],{"class":1204},[1198,3388,3193],{"class":1212},[1198,3390,1774],{"class":1208},[1198,3392,2078],{"class":1560},[1198,3394,1563],{"class":1212},[1198,3396,1597],{"class":1208},[1198,3398,3204],{"class":1231},[1198,3400,1597],{"class":1208},[1198,3402,3403],{"class":1212},")                ",[1198,3405,3406],{"class":2092},"\u002F\u002F → null — record gated\n",[1198,3408,3409,3411,3413,3415,3417,3419,3421,3423,3425,3427,3429,3431,3433,3435,3437,3439,3441],{"class":1200,"line":1508},[1198,3410,1926],{"class":1204},[1198,3412,3193],{"class":1212},[1198,3414,1774],{"class":1208},[1198,3416,133],{"class":1560},[1198,3418,1563],{"class":1212},[1198,3420,1597],{"class":1208},[1198,3422,3204],{"class":1231},[1198,3424,1597],{"class":1208},[1198,3426,1740],{"class":1212},[1198,3428,1774],{"class":1208},[1198,3430,2078],{"class":1560},[1198,3432,1563],{"class":1212},[1198,3434,1597],{"class":1208},[1198,3436,3329],{"class":1231},[1198,3438,1597],{"class":1208},[1198,3440,2158],{"class":1212},[1198,3442,3443],{"class":2092},"\u002F\u002F → null — the tier-0 blob surface is gated too\n",[941,3445,3446,3447,3449,3450,3452,3453,3456],{},"The cleared ",[953,3448,1168],{}," path — the ",[953,3451,1115],{}," analogue for attachments — sees through the gate; a ",[953,3454,3455],{},"demote()"," re-homes the blob back to tier 0, where plain reads work again:",[1189,3458,3460],{"className":1191,"code":3459,"language":1193,"meta":1194,"style":1194},"const cleared = await contracts.blob('c1').atTier()\nawait cleared.get('contract')            \u002F\u002F → the PDF bytes\n\nawait contracts.demote('c1', PUBLIC)\nawait contracts.blob('c1').get('contract') \u002F\u002F → the PDF bytes, plain read restored\n",[953,3461,3462,3496,3521,3525,3549],{"__ignoreMap":1194},[1198,3463,3464,3466,3469,3471,3473,3475,3477,3479,3481,3483,3485,3487,3489,3491,3494],{"class":1200,"line":1201},[1198,3465,1516],{"class":1368},[1198,3467,3468],{"class":1212}," cleared ",[1198,3470,1522],{"class":1208},[1198,3472,1557],{"class":1204},[1198,3474,3193],{"class":1212},[1198,3476,1774],{"class":1208},[1198,3478,133],{"class":1560},[1198,3480,1563],{"class":1212},[1198,3482,1597],{"class":1208},[1198,3484,3204],{"class":1231},[1198,3486,1597],{"class":1208},[1198,3488,1740],{"class":1212},[1198,3490,1774],{"class":1208},[1198,3492,3493],{"class":1560},"atTier",[1198,3495,2417],{"class":1212},[1198,3497,3498,3500,3503,3505,3507,3509,3511,3513,3515,3518],{"class":1200,"line":1237},[1198,3499,1926],{"class":1204},[1198,3501,3502],{"class":1212}," cleared",[1198,3504,1774],{"class":1208},[1198,3506,2078],{"class":1560},[1198,3508,1563],{"class":1212},[1198,3510,1597],{"class":1208},[1198,3512,3329],{"class":1231},[1198,3514,1597],{"class":1208},[1198,3516,3517],{"class":1212},")            ",[1198,3519,3520],{"class":2092},"\u002F\u002F → the PDF bytes\n",[1198,3522,3523],{"class":1200,"line":1257},[1198,3524,1362],{"emptyLinePlaceholder":1361},[1198,3526,3527,3529,3531,3533,3536,3538,3540,3542,3544,3546],{"class":1200,"line":1277},[1198,3528,1926],{"class":1204},[1198,3530,3193],{"class":1212},[1198,3532,1774],{"class":1208},[1198,3534,3535],{"class":1560},"demote",[1198,3537,1563],{"class":1212},[1198,3539,1597],{"class":1208},[1198,3541,3204],{"class":1231},[1198,3543,1597],{"class":1208},[1198,3545,1216],{"class":1208},[1198,3547,3548],{"class":1212}," PUBLIC)\n",[1198,3550,3551,3553,3555,3557,3559,3561,3563,3565,3567,3569,3571,3573,3575,3577,3579,3581,3583],{"class":1200,"line":1297},[1198,3552,1926],{"class":1204},[1198,3554,3193],{"class":1212},[1198,3556,1774],{"class":1208},[1198,3558,133],{"class":1560},[1198,3560,1563],{"class":1212},[1198,3562,1597],{"class":1208},[1198,3564,3204],{"class":1231},[1198,3566,1597],{"class":1208},[1198,3568,1740],{"class":1212},[1198,3570,1774],{"class":1208},[1198,3572,2078],{"class":1560},[1198,3574,1563],{"class":1212},[1198,3576,1597],{"class":1208},[1198,3578,3329],{"class":1231},[1198,3580,1597],{"class":1208},[1198,3582,2158],{"class":1212},[1198,3584,3585],{"class":2092},"\u002F\u002F → the PDF bytes, plain read restored\n",[1013,3587,3589],{"id":3588},"right-to-erasure-across-tiers","Right-to-erasure across tiers",[941,3591,3592,3593,3596],{},"When an employee leaves, ",[953,3594,3595],{},"vault.forget(subject)"," crypto-shreds every record of that subject — honoring tier, so the tier-0 record and the elevated salary both go.",[1189,3598,3600],{"className":1191,"code":3599,"language":1193,"meta":1194,"style":1194},"await employees.put('e9', { employeeId: 'e9', name: 'Sam Rivera', role: 'Analyst', startDate: '2020-01-01' })\nawait salaries.putAtTier('e9', { employeeId: 'e9', amount: '99000', notes: 'departing' }, CONFIDENTIAL)\n\nconst result = await vault.forget('e9')\nresult.recordsShredded          \u002F\u002F → 2 (across both tiers)\nresult.collections              \u002F\u002F → includes 'employees' and 'salaries'\nawait employees.get('e9')       \u002F\u002F → null\nawait salaries.getAtTier('e9')  \u002F\u002F → null\n",[953,3601,3602,3678,3740,3744,3771,3784,3796,3820],{"__ignoreMap":1194},[1198,3603,3604,3606,3608,3610,3612,3614,3616,3619,3621,3623,3625,3627,3629,3631,3633,3635,3637,3639,3641,3643,3646,3648,3650,3652,3654,3656,3659,3661,3663,3665,3667,3669,3672,3674,3676],{"class":1200,"line":1201},[1198,3605,1926],{"class":1204},[1198,3607,1711],{"class":1212},[1198,3609,1774],{"class":1208},[1198,3611,1933],{"class":1560},[1198,3613,1563],{"class":1212},[1198,3615,1597],{"class":1208},[1198,3617,3618],{"class":1231},"e9",[1198,3620,1597],{"class":1208},[1198,3622,1216],{"class":1208},[1198,3624,1209],{"class":1208},[1198,3626,1379],{"class":1378},[1198,3628,1382],{"class":1208},[1198,3630,1228],{"class":1208},[1198,3632,3618],{"class":1231},[1198,3634,1597],{"class":1208},[1198,3636,1216],{"class":1208},[1198,3638,1391],{"class":1378},[1198,3640,1382],{"class":1208},[1198,3642,1228],{"class":1208},[1198,3644,3645],{"class":1231},"Sam Rivera",[1198,3647,1597],{"class":1208},[1198,3649,1216],{"class":1208},[1198,3651,1400],{"class":1378},[1198,3653,1382],{"class":1208},[1198,3655,1228],{"class":1208},[1198,3657,3658],{"class":1231},"Analyst",[1198,3660,1597],{"class":1208},[1198,3662,1216],{"class":1208},[1198,3664,1409],{"class":1378},[1198,3666,1382],{"class":1208},[1198,3668,1228],{"class":1208},[1198,3670,3671],{"class":1231},"2020-01-01",[1198,3673,1597],{"class":1208},[1198,3675,1222],{"class":1208},[1198,3677,1751],{"class":1212},[1198,3679,3680,3682,3684,3686,3688,3690,3692,3694,3696,3698,3700,3702,3704,3706,3708,3710,3712,3714,3716,3718,3721,3723,3725,3727,3729,3731,3734,3736,3738],{"class":1200,"line":1237},[1198,3681,1926],{"class":1204},[1198,3683,1725],{"class":1212},[1198,3685,1774],{"class":1208},[1198,3687,1803],{"class":1560},[1198,3689,1563],{"class":1212},[1198,3691,1597],{"class":1208},[1198,3693,3618],{"class":1231},[1198,3695,1597],{"class":1208},[1198,3697,1216],{"class":1208},[1198,3699,1209],{"class":1208},[1198,3701,1379],{"class":1378},[1198,3703,1382],{"class":1208},[1198,3705,1228],{"class":1208},[1198,3707,3618],{"class":1231},[1198,3709,1597],{"class":1208},[1198,3711,1216],{"class":1208},[1198,3713,1437],{"class":1378},[1198,3715,1382],{"class":1208},[1198,3717,1228],{"class":1208},[1198,3719,3720],{"class":1231},"99000",[1198,3722,1597],{"class":1208},[1198,3724,1216],{"class":1208},[1198,3726,1446],{"class":1378},[1198,3728,1382],{"class":1208},[1198,3730,1228],{"class":1208},[1198,3732,3733],{"class":1231},"departing",[1198,3735,1597],{"class":1208},[1198,3737,2060],{"class":1208},[1198,3739,2063],{"class":1212},[1198,3741,3742],{"class":1200,"line":1257},[1198,3743,1362],{"emptyLinePlaceholder":1361},[1198,3745,3746,3748,3751,3753,3755,3757,3759,3761,3763,3765,3767,3769],{"class":1200,"line":1277},[1198,3747,1516],{"class":1368},[1198,3749,3750],{"class":1212}," result ",[1198,3752,1522],{"class":1208},[1198,3754,1557],{"class":1204},[1198,3756,1824],{"class":1212},[1198,3758,1774],{"class":1208},[1198,3760,685],{"class":1560},[1198,3762,1563],{"class":1212},[1198,3764,1597],{"class":1208},[1198,3766,3618],{"class":1231},[1198,3768,1597],{"class":1208},[1198,3770,1751],{"class":1212},[1198,3772,3773,3776,3778,3781],{"class":1200,"line":1297},[1198,3774,3775],{"class":1212},"result",[1198,3777,1774],{"class":1208},[1198,3779,3780],{"class":1212},"recordsShredded          ",[1198,3782,3783],{"class":2092},"\u002F\u002F → 2 (across both tiers)\n",[1198,3785,3786,3788,3790,3793],{"class":1200,"line":1317},[1198,3787,3775],{"class":1212},[1198,3789,1774],{"class":1208},[1198,3791,3792],{"class":1212},"collections              ",[1198,3794,3795],{"class":2092},"\u002F\u002F → includes 'employees' and 'salaries'\n",[1198,3797,3798,3800,3802,3804,3806,3808,3810,3812,3814,3817],{"class":1200,"line":1337},[1198,3799,1926],{"class":1204},[1198,3801,1711],{"class":1212},[1198,3803,1774],{"class":1208},[1198,3805,2078],{"class":1560},[1198,3807,1563],{"class":1212},[1198,3809,1597],{"class":1208},[1198,3811,3618],{"class":1231},[1198,3813,1597],{"class":1208},[1198,3815,3816],{"class":1212},")       ",[1198,3818,3819],{"class":2092},"\u002F\u002F → null\n",[1198,3821,3822,3824,3826,3828,3830,3832,3834,3836,3838,3841],{"class":1200,"line":1358},[1198,3823,1926],{"class":1204},[1198,3825,1725],{"class":1212},[1198,3827,1774],{"class":1208},[1198,3829,2147],{"class":1560},[1198,3831,1563],{"class":1212},[1198,3833,1597],{"class":1208},[1198,3835,3618],{"class":1231},[1198,3837,1597],{"class":1208},[1198,3839,3840],{"class":1212},")  ",[1198,3842,3819],{"class":2092},[941,3844,3845,3846,3849,3850,3853,3854,3857,3858,991],{},"The ",[953,3847,3848],{},"ForgetResult"," also carries the tier-specific residue channels — ",[953,3851,3852],{},"derivedResidueUndecodable"," and ",[953,3855,3856],{},"derivedResidueDeclined",". They are empty here and populate only when a materialized view spans an elevated record (see ",[996,3859,3861],{"href":3860},"\u002Fglossary\u002Fdeletion#erasure-residue","erasure residue",[1013,3863,3865],{"id":3864},"see-also","See also",[1018,3867,3868,3873,3880,3885],{},[1021,3869,3870,3872],{},[996,3871,872],{"href":873}," — the record-tier system this recipe exercises end to end: elevate\u002Fdemote, tier DEKs, gating semantics, and the threat model",[1021,3874,3875,3877,3878],{},[996,3876,621],{"href":622}," — tiered attachments and ",[953,3879,1165],{},[1021,3881,3882,3884],{},[996,3883,685],{"href":686}," — crypto-shred and how it honors tier",[1021,3886,3887,3889],{},[996,3888,673],{"href":674}," — the semantic encoder whose elevated records are skipped, not refused",[3891,3892,3893],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}",{"title":1194,"searchDepth":1257,"depth":1257,"links":3895},[3896,3897,3898,3899,3900,3901,3902,3903,3904,3905],{"id":1015,"depth":1237,"text":1016},{"id":1067,"depth":1237,"text":1068},{"id":1184,"depth":1237,"text":1031},{"id":1791,"depth":1237,"text":1792},{"id":2164,"depth":1237,"text":2165},{"id":2474,"depth":1237,"text":2475},{"id":2747,"depth":1237,"text":2748},{"id":3081,"depth":1237,"text":3082},{"id":3588,"depth":1237,"text":3589},{"id":3864,"depth":1237,"text":3865},null,"An HR vault where salary, notes, and contracts sit one record tier above the public basics — gated reads, TTL elevation, delegation, and tiered blobs.","md",{},{"title":535,"description":3907},"stable","important","s1fTWYO4my-kEFJOZnGchjc5mP_Gue7lkt0AovpPvm4",1791896575525]