GuardianGatedEscrow

@Serializable
sealed class GuardianGatedEscrow : WrapperConfig

Guardian-Gated Escrow Wrap hierarchy. KEK is escrowed to backend vault with optional authentication gates.

Inheritors

Types

Link copied to clipboard
@Serializable
@SerialName(value = "guardian_gated_escrow_no_gate")
data object NoGate : WrapperConfig.GuardianGatedEscrow

No authentication gate — vault releases KEK directly. Use for development/testing. Will be replaced by gated variants in production.