Skip to content
Back to work

Encrypted capture & evidence vault · private

Blackbox

An always-on audio record has to be private by construction and provably untampered.

What I built

A CPU-only, offline capture and transcription system (English + Bangla ASR with diarization) with an X25519/age keystore (scrypt KDF, atomic disk writes with directory fsync), a SLIP-0039 Shamir M-of-N key-recovery flow, a role-separated Unix-socket unlock agent (token-bucket rate limiting, SO_PEERCRED UID auth, idle auto-lock), and OpenTimestamps hash-chain tamper-evidence.

Stack

Pythonage/X25519ShamirOpenTimestampsSQLite FTS5

Status

Private repo; 500+ tests with CI across Python 3.11 and 3.12.