2 Commits

Include renames

Author	SHA1	Message	Date
VeillaxandClaude Sonnet 5.5	c08a8b8718	Add a passphrase-locked vault ... A second notebook whose pages are encrypted with a key made from a passphrase plus the server key. It is unlocked into memory only (15 minutes idle, Lock, or sign-out), is not in search, lists or downloads of the ordinary notebook, and limits wrong guesses. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 01:40:35 -07:00
VeillaxandClaude Sonnet 5.5	9f2fe4a416	Encrypt pages at rest with a key per person ... Pages are sealed with AES-256-GCM. Each person's key is derived (HKDF) from a master key in the settings file plus their Authentik issuer and subject. Plain files from earlier versions are read and re-saved encrypted. Mako refuses to open a notebook it cannot decrypt rather than overwrite it. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 00:25:37 -06:00