0nVault Security System
Military-grade encryption for AI orchestration credentials and configurations.
0nVault is a patent-pending encrypted container system that protects every layer of your AI orchestration stack. Seven semantic layers, multi-party escrow, tamper-proof seals, and secure transfer -- all in a single .0nv binary container.
Core Security Features
7 Semantic Layers
Workflows, credentials, env vars, MCP configs, site profiles, AI brain, and audit trail -- each encrypted independently with its own access controls.
Multi-Party Escrow
X25519 ECDH key agreement enables up to 8 parties to share encrypted containers with granular per-layer access control.
Seal of Truth
SHA3-256 content-addressed integrity verification. Verify any container without decrypting it. Tamper-proof by design.
Secure Transfer
Transfer registry with replay prevention, transfer ID tracking, and cryptographic chain of custody.
Patent-Pending
US Patent Application #63/990,046, filed February 24, 2026. Building on prior patent #63/968,814 (Seal of Truth, December 2025).
Binary Container Format
The .0nv format is a compact binary container that bundles encrypted layers, signatures, metadata, and seals into a single portable file.
Explore the Security System
Patent-Pending Technology
US Patent Application #63/990,046 | Filed February 24, 2026 | Inventor: Michael A Mento Jr.
Prior Patent: #63/968,814 (Seal of Truth, December 2025)
Frequently Asked Questions
What is 0nVault?
0nVault is a patent-pending encrypted container system designed specifically for AI orchestration. It protects credentials, workflows, configurations, and audit trails using military-grade encryption (AES-256-GCM) with Ed25519 digital signatures and SHA3-256 integrity verification.
How does 0nVault differ from a password manager?
Unlike password managers that store individual credentials, 0nVault encrypts entire orchestration contexts -- 7 semantic layers including workflows, MCP configs, site profiles, and AI brain states. It supports multi-party escrow, tamper-proof seals, and secure transfer with replay prevention.
Is 0nVault open source?
The 0nVault specification and reference implementation are part of the 0nMCP ecosystem (MIT licensed). The patent-pending innovations (container format, semantic layers, escrow protocol) are protected under US Patent Application #63/990,046.
What encryption does 0nVault use?
AES-256-GCM for symmetric encryption, Ed25519 for digital signatures, X25519 ECDH for key agreement in multi-party escrow, Argon2id for credential key derivation, and SHA3-256 for content-addressed integrity seals.
Can I verify a container without decrypting it?
Yes. The Seal of Truth uses SHA3-256 content hashing to produce a verification fingerprint. Anyone with the seal can verify the container has not been tampered with, without needing the decryption key.
Secure your AI orchestration stack
1155 tools. 91 services. Military-grade encryption.
Get Started Free