Vaulted - secrets your agent never sees

Vaulted is a local-first .env and secrets manager that keeps ciphertext on your machine and injects plaintext into your app through one hardened Rust path. It is MCP-native, so a coding agent can run your code with real secrets without the values ever entering its context window. This is the full build: the key hierarchy, the single execution path, the FFI bridge, the redaction engine, and the tests that make the guarantees structural.