AES-256-GCM envelope encryption over a master/data key hierarchy with automatic rotation.
Redis-cached decryption, Supabase RLS, and immutable audit logs.
Sync CLI that blocks git-tracked files and provisions JIT GitHub access.
Next.js · Supabase · Redis · Tailwind





