--- title: Sealed spaces — only your computers can open them description: A sealed space is encrypted on your computers before it leaves them, path included: what the design does that a password cannot, and how a team shares one. url: https://instibrain.ai/spaces/sealed updated: 2026-11-04 site: https://instibrain.ai/llms.txt --- # Only your computers can open it. Encrypted on your computer before it leaves, path included. We hold bytes nobody can open, us included. For your security review: the Blind Vault, every guarantee with its limit. Request access → Connect Claude Code ~/instibrain/spaces/finance/pay/bands.md your laptop # Pay bands Senior engineer $168k – $196k Lead $205k – $240k Reviewed in March v12 our database · one row what we hold key_id 6a0f…e2b1@3 · names the key, holds none of it path 7c3e9a… · ciphertext in 64-byte steps content 372 bytes · padded to a size step title none · no folder, no word of the page a subpoena gets the same bytes a breach does an audience choice ## Open or sealed. You pick per space. Open reaches your phone and every AI. Sealed opens only on your computers. open space Reach it from anywhere. - runbooks/deploy.md the steps - style/writing.md house style - decisions/2026.md the log - people/onboarding.md day one opens on Claude on your phone Claude on the web an always-on AI every computer you link sealed space Never on someone else's server. - finance/margins.md by client - pay/bands.md every band - postmortems/march.md with names - me/passport.md your Sealed space opens on your laptop your desk a teammate's admitted computer our server any web AI the chain ## Every key holder is signed. A manager's computer signs each admission. Every computer checks the chain before it takes a key, wrapped for it alone in X25519 with ML-KEM-768, so a quantum computer cannot later open what it captured. Seventeen ways a lying server fails, each a test run before a release. - entry 0 · founded The founder's MacBook Makes the first key. Signs the first entry. epoch 0 · key 3f9a - entry 1 · admit The office Mac Signed by the MacBook. The key turns. epoch 1 · key a41c - entry 2 · admit A new hire's laptop A person compared the fingerprint and approved. Live pages only, nothing older. epoch 2 · key c08d - entry 3 · remove The office Mac A new key its disk never gets. epoch 3 · key e2b1 our server cannot sign an entry cannot admit a computer cannot swap a member's keys cannot fake a teammate's computer sharing a sealed space ## A teammate's first laptop gets the key once you approve its fingerprint. The new computer shows a fingerprint. A manager's computer asks about the same one. Their next computer is approved the same way, on a computer of theirs already in, and the space takes it with no question. the new laptop first sync ``` $ instibrain sync pulled 0 pushed 0 adopted 0 no key yet for finance: this computer's fingerprint is 7f3a 9c0e 4b1d 88e2 a51c 0e7d 3b9f c2d4 ``` 7f3a 9c0e 4b1d 88e2 a51c 0e7d 3b9f c2d4 New computer "MacBook Pro" wants Finance. Does it match the fingerprint on that computer? Not now Reject Approve a manager's Mac · the system's own dialog that same sync - Epoch 2. A new key, wrapped to the new laptop. - 212 pages sent up again under it. - Live pages only, nothing older. - We learn a fingerprint, never a key. 0 bytes of a sealed page we can read 1 chain per space, replayed before any key is taken 2 managers per team, one on a machine that stays on 1 backup file and its passphrase bring back every sealed space a lost laptop ## A lost laptop comes back from one file. One file and one passphrase bring back every sealed space it read. The new computer makes new keys, takes over the spaces the lost one managed, and turns each space's key; you revoke the lost laptop on Devices. The lost laptop Revoke it in the cockpit. Its key leaves every chain. one click on Devices One file, one passphrase `instibrain key backup`, under a passphrase. Argon2id, 64 MiB, three passes. keep it anywhere but that laptop The new computer Restores the backup, signs itself in, turns the keys, pulls every page. every sealed space the lost one read ### Devices names each computer that has no backup. It marks every computer that holds a sealed key without one, and the sync client warns when a backup misses a newer key. the honest half Lose every computer and the backup, and nobody opens it again. Us included. beside the guarantee ## Our server still sees the space's name, each page's size step, and when it changed. Every edge, published. Details on the security page. | What our server still sees | What that means | | The space's name, and which pages are in it | visible | | Each page's id, size step, version, and push time | visible | | Which public keys were admitted, and when | visible | | A title, a path, a folder, or one word | never | | A version history | never kept | | The edge | Verdict | | A first sync trusts the chain until its person pins the founder's fingerprint | compare first | | A page seen for the first time may be an older version | open | | Any process running as you can read the key file | open | | Someone removed keeps what they already pulled | forward only | | Your unlocked computer and the model you ask see plaintext | by design | | A quantum adversary decrypts captured wraps later | blocked | ## Keep pay, health, and legal in the same brain, sealed. Hand this page to whoever runs your security review. Request access → Connect Claude Code next Linked computers Every machine holds its own key and signs its own work. next Spaces Personal, Sealed, team, a few people: one brain of them. --- instibrain is made by WebWork AI, Inc. Everyone uses the same models · the difference is what yours knows.