The 0nVault Container System: Encrypted, Portable AI Brains

What is 0nVault

0nVault is a patent-pending encryption and packaging system (US Provisional #63/990,046) that creates secure, portable containers for AI configurations.

Think of it as a "brain in a box" — all the credentials, workflows, environment variables, MCP configs, and AI personality settings packaged into a single encrypted file that can be transferred between systems.

The 7 Semantic Layers

Each .0nv container holds up to 7 layers:

| Layer | Contents | Encryption | |---|---|---| | workflows | .0n workflow definitions | AES-256-GCM | | credentials | API keys, tokens | Argon2id double-encrypted | | env_vars | Environment configuration | AES-256-GCM | | mcp_configs | MCP server settings | AES-256-GCM | | site_profiles | Website configurations | AES-256-GCM | | ai_brain | Personality, K-layers, behaviors | AES-256-GCM | | audit_trail | Transfer history, signatures | AES-256-GCM |

Credentials get double encryption — Argon2id on top of AES-256-GCM — because they are the most sensitive.

Seal of Truth

Every container includes a Seal of Truth — a SHA3-256 content-addressed integrity verification hash:

Seal = SHA3-256(transferId || timestamp || pubKey || SHA3-256(concat(ciphertexts)))

If any byte changes, the seal breaks. You can verify a container is genuine without decrypting it.

Multi-Party Escrow

0nVault supports escrow transfers with X25519 ECDH key exchange:

•Up to 8 parties

•Per-layer access matrix (Party A gets workflows + credentials, Party B gets only workflows)

•Ed25519 digital signatures

•Transfer registry with replay prevention

Use Cases

Business Transfer: Package all digital assets into one container for acquisition

Team Onboarding: New developer gets a .0nv file → instant access to everything

Backup: Encrypted snapshot of your entire AI configuration

Compliance: Audit trail proves chain of custody

The CLI

0nmcp vault create          # Create a .0nv container
0nmcp vault open      # Decrypt and extract
0nmcp vault inspect   # View without decrypting
0nmcp vault verify    # Check Seal of Truth
0nmcp vault escrow create   # Generate escrow keypairs

48/48 tests pass. The system is production-ready.

---

0nVault is part of 0nMCP v4.5.0. 5 patents pending. Learn more at 0nmcp.com →