TIAMAT VAULT

The user experience is one notification:

VAULT: Threat caught. 2 items scrubbed (SSN, private key). You're safe. View proof

No decryption. No blockchain knowledge needed. No tech literacy required. Just protection.

AI Agent (outbound message)
  │
  ▼
┌──────────────────────────────────────────────┐
│  VAULT FIREWALL  (background middleware)     │
│  ├── 13 PII regex detectors (8 trad + 5 crypto)│
│  ├── Policy engine (selective redaction)      │
│  ├── Rate limiting + safety caps              │
│  └── Zero-config — works out of the box       │
└─────────────┬────────────────────────────────┘
              │
    ┌─────────┼──────────┐
    ▼         ▼          ▼
┌────────┐ ┌─────────┐ ┌──────────────┐
│ Attest │ │ Encrypt │ │ VAULTPRINT   │
│On-Chain│ │ Receipt │ │ Art Gen      │
│ (Base) │ │ (ECIES) │ │ (1200x1200)  │
└───┬────┘ └───┬─────┘ └──────┬───────┘
    │          │               │
    ▼          ▼               ▼
 BaseScan   Safety          Gallery
 TX Proof   Deposit Box     + NFT Mint
              │
    ┌─────────┼──────────┐
    ▼         ▼          ▼
┌────────┐ ┌─────────┐ ┌──────────┐
│MetaMask│ │ Uniswap │ │  Locus   │
│Deleg.  │ │ Trading │ │ Payments │
│ERC-7710│ │ Permit2 │ │ USDC/Base│
└────────┘ └─────────┘ └──────────┘

The chain proves THAT scrubbing happened. Only the owner sees WHAT was scrubbed.

1. VAULT catches PII in agent output
2. Receipt encrypted with owner's ETH public key (ECIES secp256k1)
3. Encrypted blob stored, SHA-256 content hash computed
4. Content hash recorded on-chain in attestation
5. Owner can fetch + decrypt receipt at any time with their private key
6. But they don't have to. The notification is enough. The proof is just there if they need it.

Secure encrypted storage for AI agents.

Agents can deposit encrypted data (credentials, keys, sensitive configs) into VAULT's safety deposit box. Content-addressed (SHA-256), tamper-proof, 100KB per deposit. Only the owner's private key can unlock the contents. Think of it as a bank vault for digital secrets — the AI agent is the courier, the blockchain is the receipt, and only you have the key.

Endpoints: POST /vault/store (deposit) | GET /vault/retrieve/<id> (fetch) | GET /vault/deposits (browse)

Every privacy scrub generates a unique 1200x1200 generative artwork derived from the attestation hash. The art is deterministic — same hash, same art, every time. PII types determine the color palette. No two vaultprints are alike. They're mintable as ERC-721 NFTs via SuperRare's Rare Protocol.

The art IS the proof. Beautiful, verifiable, permanent.

View gallery → | Collection: 0x716cC4dD2d66A68c65EAD83Cf630C819260e92F7 (Sepolia)

AI agents are the new attack surface. They handle API keys, private keys, personal data, financial credentials — and they're connected to the internet. One prompt injection, one misconfigured tool, one hallucinated API call, and your wallet is drained or your SSN is on a paste site.

VAULT is the immune system. It doesn't require the user to understand cryptography, blockchain, or security. It just works. Silent. Vigilant. Provable. Every catch is attested on-chain so there's a permanent, tamper-proof record. The art makes it human — each protection event creates something beautiful and unique.

Protection should be invisible. Proof should be beautiful.