VaultLane — Zero-Trust Credential Broker - Sell Project

Production-grade credential broker written in pure Rust. Secrets are decrypted in a separate broker process and injected into a child process's environment only — never written to disk in plaintext, never present in the parent shell. Encrypted vault: Argon2id KDF + XChaCha20-Poly1305 AEAD, versioned format, tamper-evident Two run modes: zero-env IPC broker (least-privilege env injection) and classic mode Hash-chained, append-only audit log (tamper-evident, metadata only) Passphrase rotation with atomic re-encryption Output redaction layer for values used in a run Kernel armor on Linux (Landlock / seccomp where available) Verification (this is the part most listings can't show): 72/72 automated tests passing; rustfmt + strict Clippy (-D warnings) clean Independent structured security audit (coverage-ledger method): 6 findings confirmed, ALL fixed and regression-tested in v0.4.1 — full report available to serious buyers Full RustSec advisory scan of all 61 locked dependencies (Oct 24, 2026): 0 vulnerabilities — v0.4.2 bumped ctutils to 0.4.5 for RUSTSEC-2026-0385 Current version: v0.4.2, private GitHub repo, clean history Disclosed honestly (in the README too): no GUI; no TPM/FIDO2 hardware binding yet; the broker session token is a same-UID bearer credential during a run; pre-revenue, no users yet — you are buying the codebase and the head start, not a business. What's included: full source + tests + documentation, GitHub repo transfer, the security audit report, 14 days of email handover support. Terms: payment in full before repository transfer. Price: $5,000, reasonable offers considered.