TVN Vault
An encrypted local workspace. Think Notion + Sheets — built in Rust, encrypted with SQLCipher, with zero cloud dependencies. Your passphrase is the only key.
No SaaS. No cloud. No telemetry. Period.
What You Get
Block Editor
Rich text notes with a block-based editor. Organize thoughts, documents, and reference material locally.
Structured Databases
Schema editing, kanban views, and queryable tables. A real database management tool, not a toy.
Double-Entry Accounting
Deterministic formula engine with exact decimal math. No floating-point errors. Reproducible outputs.
Snapshots & Forks
Built-in versioning. Fork a workspace (encrypted or not). Rollback without git.
Portable Workspaces
A vault is a single encrypted file + blob directory. Copy it to a USB drive, air-gapped machine, wherever.
Loopy Integration
Embedded visual node graphs via Loopy (Nicky Case, CC0). Map causal relationships directly in your workspace.
Security Architecture
You shouldn't need to trust a corporation to take notes, track finances, or organize your life.
SQLCipher at Rest
Argon2id key derivation. Your passphrase encrypts the entire SQLite database. Vault locked = bits on disk. No master key, no recovery backdoor.
Zero Phone-Home
Zero analytics. Zero tracking. Zero network calls from the app itself. Wireshark it. You'll see nothing.
Schema-Level Sensitivity Tags
Every field has a classification: none, pii, pii_strict, secret, sensitive. Enforced in code at the data layer.
The Kill Switch
Your passphrase derives the encryption key for your data AND the authentication key for AI access via TSP. Lock the vault = AI goes cryptographically dark.
4-Layer Defense in Depth
When Vault connects to Bridge, AI never sees your raw data. Four independent layers ensure it.
Vault
Fields excluded or masked at source. PII, secrets, and sensitive data never enter the pipeline.
Bridge Content Guards
Regex patterns catch PII that slipped through. Defense in depth means we don't trust any single layer.
Truth Node Instructions
Behavioral rules the AI must follow. Not suggestions — invariants injected into every context.
Audit Trail
Every AI interaction logged with content hashes. Full accountability, exportable as JSON/CSV.
Extending the Ecosystem
Wayfinder Plugins — An RIT research project bringing AI-assisted real-time guidance to creative tools. GIMP and Godot plugins connect to Bridge via TSP, providing UI highlights and contextual feedback as you learn.
What's Next
End-to-end encrypted collaboration, without accounts or central auth.
Yjs CRDTs
Client-side encrypted (ChaCha20-Poly1305) real-time collaboration.
Zero-Knowledge Relay
WebSocket server forwards ciphertext. Can't read it.
Trust Ring
ECDH key exchange via link/QR. Cryptographic identity only.
No Accounts
No account creation. No central auth. Your keys are your identity.
Your data. Your machine. Your rules.
TVN Vault is in active development. Join the waitlist for early access.
Join the Waitlistv0.11.0 Alpha · Current as of March 2026