[{"data":1,"prerenderedAt":2531},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Ftiers":927,"mdc--u5mbys-key":2482,"mdc-wk815x-key":2498,"mdc--upbtm4-key":2510,"mdc--7sa3b2-key":2522},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":872,"access":12,"apiToc":929,"body":930,"category":2472,"description":2473,"extension":2474,"meta":2475,"navigation":2472,"nest":2476,"path":873,"seo":2477,"sinceVersion":2478,"status":2479,"stem":874,"subtitle":2472,"tier":2480,"tocExternal":2472,"__hash__":2481},"docs\u002Fservices\u002Ftiers.md",false,{"type":931,"value":932,"toc":2451},"minimark",[933,936,968,972,977,988,1009,1030,1034,1078,1082,1091,1352,1359,1378,1524,1633,1658,1669,1674,1723,1733,1741,1791,1798,1801,1848,1864,1897,1902,1915,1971,1993,2004,2008,2026,2037,2047,2051,2062,2120,2187,2191,2198,2249,2253,2256,2405,2409,2447],[934,935,872],"h1",{"id":872},[937,938,939],"blockquote",{},[940,941,942,946,947,950,951,955,956,959,960,963,964,967],"p",{},[943,944,945],"strong",{},"Record tiers, not session tiers."," This page covers per-record ",[943,948,949],{},"data"," tiers —\n",[952,953,954],"code",{},"elevate","\u002F",[952,957,958],{},"demote",", per-tier DEKs, tier-gated reads. For the session ",[943,961,962],{},"authentication","\nladder (Tier 1 secret \u002F Tier 2 multi-slot \u002F Tier 3 quick-unlock), see\n",[965,966,844],"a",{"href":845},".",[969,970],"service-meta",{":rows":971},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub\u002Ftiers`\"},{\"label\":\"Factory\",\"value\":\"`withTiers()`\"},{\"label\":\"Layer\",\"value\":\"`with-audit`\"},{\"label\":\"Cluster\",\"value\":\"G — Collaboration & Auth\"}]",[973,974,976],"h2",{"id":975},"mental-model","Mental model",[940,978,979,980,983,984,987],{},"Every record in a tiered collection lives at a ",[943,981,982],{},"numeric access tier",". Tier 0 is the\ndefault — the floor everyone with the collection DEK can read. A collection opts into higher\ntiers by declaring them: ",[952,985,986],{},"vault.collection(name, { tiers: [0, 1, 2] })",". Higher tiers see\nlower tiers; a lower tier cannot see a record parked above it.",[940,989,990,991,994,995,999,1000,1003,1004,1008],{},"Each tier wraps ",[943,992,993],{},"its own DEK",". A record's body is encrypted under a content-encryption key\n(CEK, see ",[965,996,998],{"href":997},"\u002Fcore\u002Fnoydb\u002Fenclave#per-record-keys-cek","per-record keys","); the CEK is\nAES-KW-wrapped under the ",[943,1001,1002],{},"tier's"," DEK, not one flat collection key. So \"which tier a record\nis at\" is a fact about ",[1005,1006,1007],"em",{},"which DEK can unwrap its body"," — a key-holder for tier 0 simply cannot\ndecrypt a record whose CEK is wrapped under the tier-2 DEK.",[940,1010,1011,1014,1015,955,1017,1019,1020,1023,1024,1029],{},[943,1012,1013],{},"Tiers compose with per-record keys."," Moving a record between tiers (",[952,1016,954],{},[952,1018,958],{},")\nre-wraps the ",[1005,1021,1022],{},"same"," CEK from the source-tier DEK to the target-tier DEK — the body key is\nunchanged, so the ciphertext body is not rewritten, only its wrapped-CEK header. This is the\nproperty that makes a tier move cheap and reversible (source of truth:\n",[965,1025,1026],{"href":997},[952,1027,1028],{},"core\u002Fnoydb",").",[973,1031,1033],{"id":1032},"prerequisites","Prerequisites",[1035,1036,1037,1066],"ul",{},[1038,1039,1040,1045,1046,1049,1050,1053,1054,1057,1058,1061,1062,1065],"li",{},[943,1041,1042],{},[952,1043,1044],{},"tiersStrategy: withTiers()"," passed to ",[952,1047,1048],{},"createNoydb"," — without it every record-tier\noperation throws ",[952,1051,1052],{},"TiersNotEnabledError",", and the tier cores stay out of the bundle. The\n",[952,1055,1056],{},"vault.elevate()"," handle mint is the one exception: it is always-on core, but ",[1005,1059,1060],{},"writing","\nthrough the handle still needs ",[952,1063,1064],{},"withTiers()"," and a tier-declaring collection.",[1038,1067,1068,1071,1072,1074,1075,1077],{},[943,1069,1070],{},"The collection must declare its tiers"," — ",[952,1073,986],{},".\nA collection that never declares ",[952,1076,872],{}," is a plain tier-0 collection and pays nothing.",[973,1079,1081],{"id":1080},"api","API",[940,1083,1084,1085,1087,1088,1090],{},"Record-tier operations are gated behind ",[952,1086,1044],{},". Without it every\ntier-aware call throws ",[952,1089,1052],{}," — the machinery stays out of the bundle.",[1092,1093,1098],"pre",{"className":1094,"code":1095,"language":1096,"meta":1097,"style":1097},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { withTiers } from '@noy-db\u002Fhub\u002Ftiers'\n\nconst db = await createNoydb({\n  store: \u002F* your store adapter *\u002F,\n  user: 'alice',\n  tiersStrategy: withTiers(),\n})\n\nconst vault = await db.openVault('acme')\nconst docs = vault.collection\u003CDoc>('docs', { tiers: [0, 1, 2] })\n","ts","",[952,1099,1100,1133,1154,1161,1186,1203,1221,1236,1245,1250,1281],{"__ignoreMap":1097},[1101,1102,1105,1109,1113,1117,1120,1123,1126,1130],"span",{"class":1103,"line":1104},"line",1,[1101,1106,1108],{"class":1107},"s7zQu","import",[1101,1110,1112],{"class":1111},"sMK4o"," {",[1101,1114,1116],{"class":1115},"sTEyZ"," createNoydb",[1101,1118,1119],{"class":1111}," }",[1101,1121,1122],{"class":1107}," from",[1101,1124,1125],{"class":1111}," '",[1101,1127,1129],{"class":1128},"sfazB","@noy-db\u002Fhub",[1101,1131,1132],{"class":1111},"'\n",[1101,1134,1136,1138,1140,1143,1145,1147,1149,1152],{"class":1103,"line":1135},2,[1101,1137,1108],{"class":1107},[1101,1139,1112],{"class":1111},[1101,1141,1142],{"class":1115}," withTiers",[1101,1144,1119],{"class":1111},[1101,1146,1122],{"class":1107},[1101,1148,1125],{"class":1111},[1101,1150,1151],{"class":1128},"@noy-db\u002Fhub\u002Ftiers",[1101,1153,1132],{"class":1111},[1101,1155,1157],{"class":1103,"line":1156},3,[1101,1158,1160],{"emptyLinePlaceholder":1159},true,"\n",[1101,1162,1164,1168,1171,1174,1177,1180,1183],{"class":1103,"line":1163},4,[1101,1165,1167],{"class":1166},"spNyl","const",[1101,1169,1170],{"class":1115}," db ",[1101,1172,1173],{"class":1111},"=",[1101,1175,1176],{"class":1107}," await",[1101,1178,1116],{"class":1179},"s2Zo4",[1101,1181,1182],{"class":1115},"(",[1101,1184,1185],{"class":1111},"{\n",[1101,1187,1189,1193,1196,1200],{"class":1103,"line":1188},5,[1101,1190,1192],{"class":1191},"swJcz","  store",[1101,1194,1195],{"class":1111},":",[1101,1197,1199],{"class":1198},"sHwdD"," \u002F* your store adapter *\u002F",[1101,1201,1202],{"class":1111},",\n",[1101,1204,1206,1209,1211,1213,1216,1219],{"class":1103,"line":1205},6,[1101,1207,1208],{"class":1191},"  user",[1101,1210,1195],{"class":1111},[1101,1212,1125],{"class":1111},[1101,1214,1215],{"class":1128},"alice",[1101,1217,1218],{"class":1111},"'",[1101,1220,1202],{"class":1111},[1101,1222,1224,1227,1229,1231,1234],{"class":1103,"line":1223},7,[1101,1225,1226],{"class":1191},"  tiersStrategy",[1101,1228,1195],{"class":1111},[1101,1230,1142],{"class":1179},[1101,1232,1233],{"class":1115},"()",[1101,1235,1202],{"class":1111},[1101,1237,1239,1242],{"class":1103,"line":1238},8,[1101,1240,1241],{"class":1111},"}",[1101,1243,1244],{"class":1115},")\n",[1101,1246,1248],{"class":1103,"line":1247},9,[1101,1249,1160],{"emptyLinePlaceholder":1159},[1101,1251,1253,1255,1258,1260,1262,1265,1267,1270,1272,1274,1277,1279],{"class":1103,"line":1252},10,[1101,1254,1167],{"class":1166},[1101,1256,1257],{"class":1115}," vault ",[1101,1259,1173],{"class":1111},[1101,1261,1176],{"class":1107},[1101,1263,1264],{"class":1115}," db",[1101,1266,967],{"class":1111},[1101,1268,1269],{"class":1179},"openVault",[1101,1271,1182],{"class":1115},[1101,1273,1218],{"class":1111},[1101,1275,1276],{"class":1128},"acme",[1101,1278,1218],{"class":1111},[1101,1280,1244],{"class":1115},[1101,1282,1284,1286,1289,1291,1294,1296,1299,1302,1306,1309,1311,1313,1316,1318,1321,1323,1326,1328,1331,1335,1337,1340,1342,1345,1348,1350],{"class":1103,"line":1283},11,[1101,1285,1167],{"class":1166},[1101,1287,1288],{"class":1115}," docs ",[1101,1290,1173],{"class":1111},[1101,1292,1293],{"class":1115}," vault",[1101,1295,967],{"class":1111},[1101,1297,1298],{"class":1179},"collection",[1101,1300,1301],{"class":1111},"\u003C",[1101,1303,1305],{"class":1304},"sBMFI","Doc",[1101,1307,1308],{"class":1111},">",[1101,1310,1182],{"class":1115},[1101,1312,1218],{"class":1111},[1101,1314,1315],{"class":1128},"docs",[1101,1317,1218],{"class":1111},[1101,1319,1320],{"class":1111},",",[1101,1322,1112],{"class":1111},[1101,1324,1325],{"class":1191}," tiers",[1101,1327,1195],{"class":1111},[1101,1329,1330],{"class":1115}," [",[1101,1332,1334],{"class":1333},"sbssI","0",[1101,1336,1320],{"class":1111},[1101,1338,1339],{"class":1333}," 1",[1101,1341,1320],{"class":1111},[1101,1343,1344],{"class":1333}," 2",[1101,1346,1347],{"class":1115},"] ",[1101,1349,1241],{"class":1111},[1101,1351,1244],{"class":1115},[1353,1354,1356,1357],"h3",{"id":1355},"scoped-session-elevation-vaultelevate","Scoped session elevation — ",[952,1358,1056],{},[940,1360,1361,1362,1365,1366,1369,1370,1373,1374,1377],{},"When a workflow needs a lower-tier session to briefly act at a higher tier — approving a gated\nwrite, running a plaintext export — ",[952,1363,1364],{},"vault.elevate(tier, { ttlMs, reason })"," returns an\n",[952,1367,1368],{},"ElevatedHandle"," whose ",[943,1371,1372],{},"writes"," land at the elevated tier. Reads on the original ",[952,1375,1376],{},"vault","\nstay at the caller's inherent tier; only the returned handle is privileged.",[1092,1379,1381],{"className":1094,"code":1380,"language":1096,"meta":1097,"style":1097},"const elevated = await vault.elevate(2, {\n  ttlMs: 15 * 60_000,\n  reason: 'plaintext export',\n})\n\u002F\u002F → ElevatedHandle { tier: 2, reason: 'plaintext export', expiresAt: \u003Cnow + ttlMs> }\n\nawait elevated.collection\u003CDoc>('docs').put('d1', record)\nawait elevated.release() \u002F\u002F or let ttlMs elapse\n",[952,1382,1383,1410,1428,1444,1450,1455,1459,1507],{"__ignoreMap":1097},[1101,1384,1385,1387,1390,1392,1394,1396,1398,1400,1402,1405,1407],{"class":1103,"line":1104},[1101,1386,1167],{"class":1166},[1101,1388,1389],{"class":1115}," elevated ",[1101,1391,1173],{"class":1111},[1101,1393,1176],{"class":1107},[1101,1395,1293],{"class":1115},[1101,1397,967],{"class":1111},[1101,1399,954],{"class":1179},[1101,1401,1182],{"class":1115},[1101,1403,1404],{"class":1333},"2",[1101,1406,1320],{"class":1111},[1101,1408,1409],{"class":1111}," {\n",[1101,1411,1412,1415,1417,1420,1423,1426],{"class":1103,"line":1135},[1101,1413,1414],{"class":1191},"  ttlMs",[1101,1416,1195],{"class":1111},[1101,1418,1419],{"class":1333}," 15",[1101,1421,1422],{"class":1111}," *",[1101,1424,1425],{"class":1333}," 60_000",[1101,1427,1202],{"class":1111},[1101,1429,1430,1433,1435,1437,1440,1442],{"class":1103,"line":1156},[1101,1431,1432],{"class":1191},"  reason",[1101,1434,1195],{"class":1111},[1101,1436,1125],{"class":1111},[1101,1438,1439],{"class":1128},"plaintext export",[1101,1441,1218],{"class":1111},[1101,1443,1202],{"class":1111},[1101,1445,1446,1448],{"class":1103,"line":1163},[1101,1447,1241],{"class":1111},[1101,1449,1244],{"class":1115},[1101,1451,1452],{"class":1103,"line":1188},[1101,1453,1454],{"class":1198},"\u002F\u002F → ElevatedHandle { tier: 2, reason: 'plaintext export', expiresAt: \u003Cnow + ttlMs> }\n",[1101,1456,1457],{"class":1103,"line":1205},[1101,1458,1160],{"emptyLinePlaceholder":1159},[1101,1460,1461,1464,1467,1469,1471,1473,1475,1477,1479,1481,1483,1485,1488,1490,1493,1495,1497,1500,1502,1504],{"class":1103,"line":1223},[1101,1462,1463],{"class":1107},"await",[1101,1465,1466],{"class":1115}," elevated",[1101,1468,967],{"class":1111},[1101,1470,1298],{"class":1179},[1101,1472,1301],{"class":1111},[1101,1474,1305],{"class":1304},[1101,1476,1308],{"class":1111},[1101,1478,1182],{"class":1115},[1101,1480,1218],{"class":1111},[1101,1482,1315],{"class":1128},[1101,1484,1218],{"class":1111},[1101,1486,1487],{"class":1115},")",[1101,1489,967],{"class":1111},[1101,1491,1492],{"class":1179},"put",[1101,1494,1182],{"class":1115},[1101,1496,1218],{"class":1111},[1101,1498,1499],{"class":1128},"d1",[1101,1501,1218],{"class":1111},[1101,1503,1320],{"class":1111},[1101,1505,1506],{"class":1115}," record)\n",[1101,1508,1509,1511,1513,1515,1518,1521],{"class":1103,"line":1238},[1101,1510,1463],{"class":1107},[1101,1512,1466],{"class":1115},[1101,1514,967],{"class":1111},[1101,1516,1517],{"class":1179},"release",[1101,1519,1520],{"class":1115},"() ",[1101,1522,1523],{"class":1198},"\u002F\u002F or let ttlMs elapse\n",[1035,1525,1526,1535,1559,1576,1593,1615],{},[1038,1527,1528,1531,1532,1534],{},[952,1529,1530],{},"vault.elevate(tier, { ttlMs, reason }): Promise\u003CElevatedHandle>"," — the handle mint itself is\nalways-on core; writing through the handle requires the target collection to declare the tier\nand ",[952,1533,1064],{}," to be wired.",[1038,1536,1537,1539,1540,1543,1544,1543,1547,1550,1551,1554,1555,1558],{},[952,1538,1368],{}," carries ",[952,1541,1542],{},"tier",", ",[952,1545,1546],{},"reason",[952,1548,1549],{},"expiresAt",", exposes ",[952,1552,1553],{},"collection\u003CT>(name).put(id, record)",", and ",[952,1556,1557],{},"release(): Promise\u003Cvoid>"," (idempotent — reverts the elevation and frees the\nvault's one active-elevation slot).",[1038,1560,1561,1564,1565,1567,1568,1571,1572,1575],{},[943,1562,1563],{},"TTL is enforced lazily."," The handle checks ",[952,1566,1549],{}," on every operation, so a forgotten\n",[952,1569,1570],{},"release()"," cannot keep elevated writes alive — the next write after expiry throws\n",[952,1573,1574],{},"ElevationExpiredError",". Reads on the original vault are unaffected.",[1038,1577,1578,1581,1582,1585,1586,1589,1590,1592],{},[943,1579,1580],{},"One elevation per vault."," A second ",[952,1583,1584],{},"vault.elevate(...)"," while one is live throws\n",[952,1587,1588],{},"AlreadyElevatedError",". ",[952,1591,1570],{}," the current handle first.",[1038,1594,1595,1598,1599,955,1602,955,1605,1608,1609,1611,1612,967],{},[943,1596,1597],{},"Clearance is required."," The keyring must already carry a wrap for the target tier on at\nleast one collection, or the caller must be ",[952,1600,1601],{},"owner",[952,1603,1604],{},"admin",[952,1606,1607],{},"custodian"," (who auto-mint the\ntier DEK at write time). Otherwise ",[952,1610,954],{}," throws ",[952,1613,1614],{},"TierNotGrantedError",[1038,1616,1617,1620,1621,1624,1625,1628,1629,1632],{},[943,1618,1619],{},"Not a privilege escalation."," The export gates (",[952,1622,1623],{},"vault.assertCanExport('plaintext', fmt)","\nand ",[952,1626,1627],{},"vault.assertCanExport('bundle')",") are ",[1005,1630,1631],{},"not"," bypassed by elevation — it projects a\ntier, not a role.",[940,1634,1635,1636,1639,1640,1643,1644,1647,1648,1651,1652,1654,1655,967],{},"Each elevation writes one audit envelope to the reserved ",[952,1637,1638],{},"_elevation_audit"," collection\n(",[952,1641,1642],{},"{ id, actor, tier, reason, ttlMs, startedAt, expiresAt }","), and every write through the\nhandle fires a ",[952,1645,1646],{},"CrossTierAccessEvent"," with ",[952,1649,1650],{},"authorization: 'elevation'",", stamped with ",[952,1653,1546],{},".\nSubscribe with ",[952,1656,1657],{},"vault.onCrossTierAccess(listener)",[1353,1659,1661,1662,1665,1666],{"id":1660},"per-record-moves-collectionelevate-demote","Per-record moves — ",[952,1663,1664],{},"collection.elevate()"," \u002F ",[952,1667,1668],{},"demote()",[940,1670,1671,1672,1195],{},"For moving an individual record's home tier (rather than opening a session handle), the\ncollection exposes the tier-move primitives — all gated behind ",[952,1673,1064],{},[1035,1675,1676,1686,1699],{},[1038,1677,1678,1681,1682,1685],{},[952,1679,1680],{},"collection.elevate(id, toTier): Promise\u003CTierMoveResult>"," — re-encrypts the record under the\ntarget tier's DEK and stamps ",[952,1683,1684],{},"_elevatedBy"," with the caller id. The caller must hold DEKs for\nboth the current tier (to decrypt) and the target tier (to re-encrypt).",[1038,1687,1688,1691,1692,1695,1696,967],{},[952,1689,1690],{},"collection.demote(id, toTier): Promise\u003CTierMoveResult>"," — the reverse. Allowed ",[943,1693,1694],{},"only"," for\nthe user who performed the last elevation, or an owner; anyone else gets\n",[952,1697,1698],{},"TierDemoteDeniedError",[1038,1700,1701,1539,1704,1707,1708,1711,1712,955,1715,1718,1719,1722],{},[952,1702,1703],{},"TierMoveResult",[952,1705,1706],{},"searchResidue: boolean"," — the record move (indexes, cache, ledger,\nderived outputs, history, blobs) always completes; ",[952,1709,1710],{},"searchResidue: true"," signals only that the\nsearch-index side (",[952,1713,1714],{},"_vec",[952,1716,1717],{},"_ftindex",") was left needing a retry, mirroring ",[952,1720,1721],{},"forget()","'s\nresidue posture rather than aborting the move.",[1353,1724,1726,1727,1665,1730],{"id":1725},"cleared-reads-getattier-listattier","Cleared reads — ",[952,1728,1729],{},"getAtTier()",[952,1731,1732],{},"listAtTier()",[940,1734,1735,1736,1740],{},"Tier-0 read surfaces treat an elevated record as absent (see ",[965,1737,1739],{"href":1738},"#readwrite-gating","gating","). The\nsanctioned way for a cleared caller to read above their inherent tier:",[1035,1742,1743,1768,1779],{},[1038,1744,1745,1748,1749,1752,1753,1756,1757,1752,1760,1763,1764,1767],{},[952,1746,1747],{},"collection.getAtTier(id): Promise\u003CT | GhostRecord | null>"," — a fully-cleared read returns\nthe plaintext record and fires a cross-tier event; an uncleared read returns ",[952,1750,1751],{},"null","\n(",[952,1754,1755],{},"'invisibility'"," mode, the default) or a ",[952,1758,1759],{},"GhostRecord { _ghost, _tier, canElevateFrom? }",[952,1761,1762],{},"'ghost'"," mode, selected with the collection's ",[952,1765,1766],{},"tierMode"," option).",[1038,1769,1770,1773,1774,1776,1777,967],{},[952,1771,1772],{},"collection.listAtTier(): Promise\u003CArray\u003C{ id; tier; readable }>>"," — ids grouped by the\ncaller's readability; above-tier ids are omitted under ",[952,1775,1755],{}," and included with\ntier metadata under ",[952,1778,1762],{},[1038,1780,1781,1784,1785,1788,1789,1029],{},[952,1782,1783],{},"collection.putAtTier(id, record, tier, opts?): Promise\u003CTierMoveResult>"," — a direct tiered\nwrite. It asserts access to the record's ",[943,1786,1787],{},"existing"," tier as well as the target, so a caller\ncleared only for the target cannot move a record parked at a tier they were never granted\n(",[952,1790,1614],{},[1353,1792,1794,1795],{"id":1793},"cross-tier-delegation-vaultdelegate","Cross-tier delegation — ",[952,1796,1797],{},"vault.delegate()",[940,1799,1800],{},"Delegation hands another user time-boxed access to a tier without a full grant:",[1035,1802,1803,1828,1838],{},[1038,1804,1805,1808,1809,1812,1813,1816,1817,1820,1821,1824,1825,967],{},[952,1806,1807],{},"vault.delegate(opts: IssueDelegationOptions): Promise\u003CDelegationToken>"," — the caller must\nhold the tier DEK for the requested ",[952,1810,1811],{},"{ tier, collection? }","; it wraps that DEK into the\nreserved ",[952,1814,1815],{},"_delegations"," collection. ",[952,1818,1819],{},"IssueDelegationOptions"," is ",[952,1822,1823],{},"{ toUser, tier, collection?, record?, until: Date | string }",". A target with no keyring in the vault raises\n",[952,1826,1827],{},"DelegationTargetMissingError",[1038,1829,1830,1833,1834,1837],{},[952,1831,1832],{},"vault.refreshDelegations(now?: Date): Promise\u003CDelegationToken[]>"," — the ",[943,1835,1836],{},"read half",". Merges\nevery live delegation addressed to the calling user into their keyring and returns the ones it\nmerged.",[1038,1839,1840,1843,1844,1847],{},[952,1841,1842],{},"vault.revokeDelegation(id: string): Promise\u003Cvoid>"," — revoke by id; safe to call for an id\nthat does not exist. Revocation is the deletion of the ",[952,1845,1846],{},"_delegations\u002F\u003Cid>"," envelope.",[940,1849,1850,1851,1854,1855,1858,1859,1647,1861,967],{},"The returned ",[952,1852,1853],{},"DelegationToken"," records ",[952,1856,1857],{},"{ id, toUser, fromUser, tier, collection, record?, until, wrappedDek?, wrappedDeks?, sealedCek?, createdAt }",". A read or write via an active\ndelegation fires a ",[952,1860,1646],{},[952,1862,1863],{},"authorization: 'delegation'",[1865,1866,1869],"callout",{"color":1867,"icon":1868},"warning","i-lucide-triangle-alert",[940,1870,1871,1874,1877,1878,1881,1882,1885,1886,1888,1889,1892,1893,1896],{},[943,1872,1873],{},"Merging is EXPLICIT — it does not happen on open.",[952,1875,1876],{},"refreshDelegations()"," must be called; opening the vault does not merge anything, and neither\ndoes a read. As of hub 0.9.0 that is deliberate rather than pending: an automatic scan would\ncall ",[952,1879,1880],{},"getDEK('_delegations')",", which ",[943,1883,1884],{},"mints"," a DEK when absent and persists the keyring — so\nmerely opening a vault would write to it, and on a vault whose shared ",[952,1887,1815],{}," DEK the\ncaller does not hold it would mint a ",[1005,1890,1891],{},"wrong"," one and then fail to decrypt every token. Call it\nafter open, and on whatever interval your app wants; it lists first and returns ",[952,1894,1895],{},"[]"," when\nnothing is written.",[1898,1899,1901],"h4",{"id":1900},"per-collection-or-collection-wide","Per-collection or collection-wide",[940,1903,1904,1906,1907,1910,1911,1914],{},[952,1905,1298],{}," is optional on the way in and ",[952,1908,1909],{},"string | null"," on the way out — omit it and the\ntoken covers ",[943,1912,1913],{},"every collection the grantor held at that tier",". The two forms carry different\npayloads, which is why both fields are optional:",[1916,1917,1918,1935],"table",{},[1919,1920,1921],"thead",{},[1922,1923,1924,1929,1932],"tr",{},[1925,1926,1927],"th",{},[952,1928,1298],{},[1925,1930,1931],{},"payload",[1925,1933,1934],{},"meaning",[1936,1937,1938,1952],"tbody",{},[1922,1939,1940,1944,1949],{},[1941,1942,1943],"td",{},"a name",[1941,1945,1946],{},[952,1947,1948],{},"wrappedDek",[1941,1950,1951],{},"one wrapped tier DEK",[1922,1953,1954,1959,1964],{},[1941,1955,1956,1957],{},"omitted → ",[952,1958,1751],{},[1941,1960,1961],{},[952,1962,1963],{},"wrappedDeks",[1941,1965,1966,1967,1970],{},"a map, ",[952,1968,1969],{},"\u003Ccollection>#\u003Ctier>"," → wrapped DEK, one entry per collection",[940,1972,1973,1974,1977,1978,1981,1982,1985,1986,1988,1989,1992],{},"⛔ ",[943,1975,1976],{},"A collection-wide token is a MAP, not a wildcard key."," Every collection has its own tier\nDEK — ",[952,1979,1980],{},"docs#1"," and ",[952,1983,1984],{},"ledger#1"," are different keys — so one key cannot decrypt many collections.\nEach entry merges under its real ",[952,1987,1969],{}," slot, and the access gate needs no\nwildcard case and gains no new privilege surface. (An earlier design tried a single\n",[952,1990,1991],{},"__any#\u003Ctier>"," slot; it was removed before release because the gate would have said yes and\ndecryption would then have failed.)",[940,1994,1995,1996,1999,2000,2003],{},"⚠️ ",[943,1997,1998],{},"\"Every collection\" means every collection AS OF ISSUE TIME."," The map is a snapshot taken\nwhen ",[952,2001,2002],{},"delegate()"," ran: a collection created afterwards is not in it and is not granted by it,\nbecause the grantor had no DEK to wrap. If a grantee needs access to collections that do not\nexist yet, re-issue — there is no form of this token that widens itself later.",[1898,2005,2007],{"id":2006},"what-the-grantor-needs-from-the-target","What the grantor needs from the target",[940,2009,2010,2011,2013,2014,2017,2018,2021,2022,2025],{},"Since hub 0.9.0 (core#65): only the target's ",[943,2012,12],{}," half. The tier DEKs are AES-KW-wrapped\nunder a per-token ",[1005,2015,2016],{},"content key",", and that key is RSA-OAEP-sealed to the target's inbox public\nhalf in ",[952,2019,2020],{},"sealedCek",", so a grantor can delegate to a member whose secret it does not know.\nOpening one needs the target's inbox ",[1005,2023,2024],{},"private"," half, which is sealed in their own keyring under\na DEK only their KEK unwraps.",[940,2027,1995,2028,2033,2034,2036],{},[943,2029,2030,2031],{},"A token written before 0.9.0 has no ",[952,2032,2020],{}," and is wrapped under the grantor's own\nKEK. Those still load for a target that shares that KEK — the only case that ever worked — and\nare skipped for anyone else, exactly as before. So ",[952,2035,2020],{}," being absent identifies an older\ntoken, never a broken one.",[940,2038,2039,2040,2043,2044,2046],{},"⭐ The slot ",[943,2041,2042],{},"names"," stay readable to any member holding the ",[952,2045,1815],{}," DEK while the keys\ndo not: an operator can enumerate active delegations for audit without being able to use them.",[973,2048,2050],{"id":2049},"readwrite-gating","Read\u002Fwrite gating",[940,2052,2053,2054,2057,2058,2061],{},"Tiers are enforced at two choke points — a ",[943,2055,2056],{},"read gate"," that makes above-tier records\ninvisible, and a ",[943,2059,2060],{},"write ring"," that refuses tier-0 writes onto elevated records.",[940,2063,2064,2067,2068,1543,2071,1202,2074,1554,2077,2080,2081,2084,2085,2088,2089,2091,2092,2094,2095,2097,2098,2100,2101,2104,2105,1202,2107,2109,2110,2116,2117,2119],{},[943,2065,2066],{},"Reads are gated at runtime, before any decrypt."," On a tiered collection, ",[952,2069,2070],{},"get()",[952,2072,2073],{},"list()",[952,2075,2076],{},"query()",[952,2078,2079],{},"blob(id)"," treat an ",[943,2082,2083],{},"elevated"," record as nonexistent for a lower-tier caller —\nthe check runs off the record's live ",[952,2086,2087],{},"_tier"," envelope header before any key material is\nresolved. The ",[952,2090,1766],{}," option chooses the shape: ",[952,2093,1755],{}," (default) returns\n",[952,2096,1751],{}," \u002F omits the id; ",[952,2099,1762],{}," returns a ",[952,2102,2103],{},"GhostRecord"," placeholder that reveals the record\nexists and its tier without its contents. The only sanctioned cleared paths are ",[952,2106,1729],{},[952,2108,1732],{},", and — for attachments — ",[965,2111,2113],{"href":2112},"\u002Fservices\u002Fblobs#tiered-blobs-content-follows-the-records-tier",[952,2114,2115],{},"blob(id).atTier()",";\nan ungranted cleared read throws ",[952,2118,1614],{}," and mints no key.",[940,2121,2122,2125,2126,2128,2129,2132,2133,2136,2137,2140,2141,1071,2144,2147,2148,955,2150,2152,2153,2155,2156,2158,2159,2161,2162,1665,2165,1665,2168,2170,2171,1589,2173,2176,2177,2179,2180,2182,2183,2186],{},[943,2123,2124],{},"The write ring refuses tier-0 writes onto elevated records."," On a collection that declares\n",[952,2127,872],{},", a tier-0 ",[952,2130,2131],{},"put()"," or ",[952,2134,2135],{},"delete()"," targeting a record whose live envelope is elevated\n(",[952,2138,2139],{},"_tier > 0",") throws ",[952,2142,2143],{},"TierWriteRefusedError",[1005,2145,2146],{},"even for a caller who holds the tier's DEK",".\nThe refusal is not about clearance; ",[952,2149,2131],{},[952,2151,2135],{}," are simply the wrong API for an elevated\nrecord: a tier-0 ",[952,2154,2131],{}," over one would silently demote it (an elevated record reads as absent,\nso ",[952,2157,2131],{}," treats the id as a create), and a tier-0 ",[952,2160,2135],{}," would write a tier-less marker\nthat erases the elevation signal. Use ",[952,2163,2164],{},"putAtTier()",[952,2166,2167],{},"elevate()",[952,2169,1668],{}," — the tier-aware\npaths — which are unaffected, as are tier-0 records and any collection that never declares\n",[952,2172,872],{},[952,2174,2175],{},"onBeforeWrite"," hooks still fire for a refused ",[952,2178,1492],{},", receiving a ",[943,2181,1751],{}," prior for the\nelevated record (never its plaintext); ",[952,2184,2185],{},"beforePut"," gate handlers do not fire at all — the\nrefusal precedes the gate bus.",[973,2188,2190],{"id":2189},"what-tiers-do-and-dont-protect","What tiers do and don't protect",[940,2192,2193,2194,2197],{},"Tiers are a ",[943,2195,2196],{},"confidentiality"," boundary keyed by DEK, not an access-control policy layer.\nHonestly, that means:",[1035,2199,2200,2206],{},[1038,2201,2202,2205],{},[943,2203,2204],{},"What they protect."," An elevated record's body, its per-tier CEK, and — on a tiered blob\ncollection — its attachment content, chunk addresses, and slot metadata are all encrypted\nunder the tier DEK. A tier-0 key holder, including one with raw read access to the storage\nbackend, cannot decrypt them at rest. Above-tier records are invisible on tier-0 read\nsurfaces before any decrypt, and the write ring stops a tier-0 caller from silently demoting\nor erasing them.",[1038,2207,2208,2211,2212,2215,2216,2218,2219,2221,2222,2224,2225,2228,2229,2232,2233,2236,2237,2240,2241,2244,2245,2248],{},[943,2209,2210],{},"What they don't."," Tiers protect record ",[1005,2213,2214],{},"bodies",", not the envelope protocol header. The\nfields a store, the sync engine, and history read without keys — including ",[952,2217,2087],{}," and\n",[952,2220,1684],{}," — are ",[943,2223,1631],{}," encrypted (see\n",[965,2226,2227],{"href":26},"forking the enclave","): an observer with backend\naccess learns ",[1005,2230,2231],{},"which"," records are elevated and ",[1005,2234,2235],{},"to what tier",", just not their contents. Tier\nmembership therefore leaks record count and tier distribution. Owners, admins, and custodians\nauto-mint tier DEKs, so tiers are not a defense against a compromised admin keyring. And two\ndocumented at-rest residues survive: a ",[952,2238,2239],{},"blobTierPolicy: 'dedup'"," shared blob stays decryptable\nunder the flat ",[952,2242,2243],{},"_blob"," DEK, and a demoted record's ",[1005,2246,2247],{},"prior"," history versions remain\ndecryptable at their original tier until the history keys are rewrapped. Tiers are a graded\nconfidentiality tool for one vault's own key-holders — not a substitute for revoking a\nkeyring you no longer trust.",[973,2250,2252],{"id":2251},"tiers-across-the-system","Tiers across the system",[940,2254,2255],{},"Tier behavior is documented in each feature's own home; this table is the map.",[1916,2257,2258,2271],{},[1919,2259,2260],{},[1922,2261,2262,2265,2268],{},[1925,2263,2264],{},"Area",[1925,2266,2267],{},"Where",[1925,2269,2270],{},"One-line behavior",[1936,2272,2273,2289,2308,2330,2349,2361,2388],{},[1922,2274,2275,2278,2282],{},[1941,2276,2277],{},"Crypto composition",[1941,2279,2280],{},[965,2281,1028],{"href":997},[1941,2283,2284,955,2286,2288],{},[952,2285,954],{},[952,2287,958],{}," re-wrap the same CEK from source-tier DEK to target-tier DEK; body key unchanged.",[1922,2290,2291,2294,2299],{},[1941,2292,2293],{},"Tiered blobs",[1941,2295,2296],{},[965,2297,2298],{"href":2112},"blobs → Tiered blobs",[1941,2300,2301,2302,2305,2306,967],{},"A blob's storage tier follows its owning record; ",[952,2303,2304],{},"blobTierPolicy: 'isolate' | 'dedup'"," governs shared content; cleared read via ",[952,2307,2115],{},[1922,2309,2310,2313,2319],{},[1941,2311,2312],{},"Search & embeddings",[1941,2314,2315],{},[965,2316,2318],{"href":2317},"\u002Fservices\u002Fembeddings#rebuilding-vectors-rebuildembeddings","embeddings → rebuildEmbeddings",[1941,2320,2321,2322,2325,2326,2329],{},"Elevated records are ",[943,2323,2324],{},"skipped, not refused"," — a re-derive counts them in ",[952,2327,2328],{},"skipped"," rather than writing a searchable sidecar above tier 0.",[1922,2331,2332,2335,2341],{},[1941,2333,2334],{},"Erasure residue",[1941,2336,2337],{},[965,2338,2340],{"href":2339},"\u002Fglossary\u002Fdeletion#erasure-residue","glossary\u002Fdeletion → Erasure residue",[1941,2342,2343,2345,2346,967],{},[952,2344,1721],{}," of an elevated owner shreds under its pre-tombstone tier; an undecodable MV output row surfaces as ",[952,2347,2348],{},"derivedResidueUndecodable",[1922,2350,2351,2354,2358],{},[1941,2352,2353],{},"Right-to-erasure",[1941,2355,2356],{},[965,2357,685],{"href":686},[1941,2359,2360],{},"Crypto-shred honors tier: an elevated blob-owner shreds under the record's live tier.",[1922,2362,2363,2366,2370],{},[1941,2364,2365],{},"Policy errors",[1941,2367,2368],{},[965,2369,844],{"href":845},[1941,2371,2372,2373,2376,2377,2380,2381,2383,2384,2387],{},"An ",[952,2374,2375],{},"insufficient-tier"," ",[952,2378,2379],{},"PolicyDeniedError"," (e.g. from ",[965,2382,884],{"href":885},"'s ",[952,2385,2386],{},"view-team-profiles"," gate) belongs to the session authentication ladder, not this page — the caller is expected to authenticate further, not elevate a record.",[1922,2389,2390,2393,2398],{},[1941,2391,2392],{},"Wire fields",[1941,2394,2395],{},[965,2396,2397],{"href":26},"architecture → forking the enclave",[1941,2399,2400,1981,2402,2404],{},[952,2401,2087],{},[952,2403,1684],{}," are family-owned protocol-header fields, readable without keys.",[973,2406,2408],{"id":2407},"see-also","See also",[1035,2410,2411,2416,2421,2429,2437],{},[1038,2412,2413,2415],{},[965,2414,868],{"href":869}," — grants and tiers compose: a delegate's tier DEK is scoped by the\nkeyring the team service manages",[1038,2417,2418,2420],{},[965,2419,21],{"href":66}," — the per-record CEK and tier-DEK re-wrap this page builds on",[1038,2422,2423,2425,2426],{},[965,2424,621],{"href":622}," — tiered attachments and ",[952,2427,2428],{},"blobTierPolicy",[1038,2430,2431,2433,2434,2436],{},[965,2432,844],{"href":845}," — the unrelated session ",[943,2435,962],{}," ladder",[1038,2438,2439,2442,2443],{},[965,2440,2441],{"href":598},"Services overview"," · ",[965,2444,2446],{"href":2445},"\u002Forientation","Orientation map",[2448,2449,2450],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":1097,"searchDepth":1156,"depth":1156,"links":2452},[2453,2454,2455,2468,2469,2470,2471],{"id":975,"depth":1135,"text":976},{"id":1032,"depth":1135,"text":1033},{"id":1080,"depth":1135,"text":1081,"children":2456},[2457,2459,2461,2463],{"id":1355,"depth":1156,"text":2458},"Scoped session elevation — vault.elevate()",{"id":1660,"depth":1156,"text":2460},"Per-record moves — collection.elevate() \u002F demote()",{"id":1725,"depth":1156,"text":2462},"Cleared reads — getAtTier() \u002F listAtTier()",{"id":1793,"depth":1156,"text":2464,"children":2465},"Cross-tier delegation — vault.delegate()",[2466,2467],{"id":1900,"depth":1163,"text":1901},{"id":2006,"depth":1163,"text":2007},{"id":2049,"depth":1135,"text":2050},{"id":2189,"depth":1135,"text":2190},{"id":2251,"depth":1135,"text":2252},{"id":2407,"depth":1135,"text":2408},null,"Record tiers — scoped elevation with TTL + reason, per-tier DEKs, tier-gated reads, and how blobs, search, and forget behave across tiers.","md",{},"service",{"title":872,"description":2473},"0.1.0-pre.3","stable","important","mm2u5Trd1H1xXFYhk2B00I_PRVw2hmB8huZplHQyBTc",{"data":2483,"body":2484},{},{"type":2485,"children":2486},"root",[2487],{"type":2488,"tag":940,"props":2489,"children":2490},"element",{},[2491],{"type":2488,"tag":952,"props":2492,"children":2494},{"className":2493},[],[2495],{"type":2496,"value":2497},"text","with-audit",{"data":2499,"body":2500},{},{"type":2485,"children":2501},[2502],{"type":2488,"tag":940,"props":2503,"children":2504},{},[2505],{"type":2488,"tag":952,"props":2506,"children":2508},{"className":2507},[],[2509],{"type":2496,"value":1151},{"data":2511,"body":2512},{},{"type":2485,"children":2513},[2514],{"type":2488,"tag":940,"props":2515,"children":2516},{},[2517],{"type":2488,"tag":952,"props":2518,"children":2520},{"className":2519},[],[2521],{"type":2496,"value":1064},{"data":2523,"body":2524},{},{"type":2485,"children":2525},[2526],{"type":2488,"tag":940,"props":2527,"children":2528},{},[2529],{"type":2496,"value":2530},"G — Collaboration & Auth",1791896587607]