No single estate tool is a general secrets vault — so this composes three that are real: a key is sealed at rest (AES-256-GCM, in your browser), usable only by an organ that holds the right capability and stays inside a budget it cannot cross, and every use — granted or refused — is written to a tamper-evident audit chain. The value is revealed only on a grant, only in memory, and never leaves the page.