VAULT/PhiKey decision space
Documentation includes both paths with safe defaults. Full implementation details remain gated.
Public positioning and disclosure tiers: Phyllux Vault. Before any deploy that touches vault or crypto copy: Safe public publish — run npm run preflight from the site repo (or npm run scan:public for scan only).