OC Vault
A Bitcoin-identity-bound encrypted vault — no account, no master password, no lock-in. Cloud sync prepaid in sats over Lightning.
Built by OrangeCheck on oc-lock-protocol — the cryptographic envelope format (v2.0, stable since 2026-04) for zero-knowledge secret storage bound to Bitcoin addresses (Flow 4, the self-vault 'password manager' pattern). The protocol and @orangecheck/vault-core are MIT, open for life by design.
Shipped v1.0 on 2026-05-12; Lightning receiving live since 2026-05-30. Stack: Next.js 15.5 + React 19 + Tailwind 4 on Vercel, Supabase + self-hosted BTCPay on Fly, 111 unit tests passing. Live: unlimited entry types (password, note, TOTP, API key, kv, card, identity, file, seed phrase, env-var bundles); AES-256-GCM end-to-end encryption; local-first IndexedDB; team vaults with roles (owner/admin/member/viewer); cloud sync with conflict detection; a vault-health audit with a Have-I-Been-Pwned k-anonymity breach scan; command-palette search; passphrase-encrypted backup/restore; CSV import from 1Password/Bitwarden/LastPass/Chrome; portable .lock envelope export (MIT SDK). Developer platform shipped: @orangecheck/vault-core (entry model + ocv:// refs) and @orangecheck/vault-cli (login/sync). Lightning only, 210k-sats lifetime cap.
Seed the witnessed-recovery SKU (v1.8). The Flow-4 self-vault pattern is proven; the next tier adds a timelocked recovery shard — sealed to OC's device key with a release rule (a BIP-322 wallet-loss declaration plus a 14-day delay), where OC sees ciphertext only and cannot release outside the rule. Capital funds witnessed-recovery protocol hardening (proof-of-lost-wallet via a Nostr attestation contract), the cloud shard-storage service + release-rule engine on Fly, three lighthouse beta customers, and a third-party code audit of vault-core + release-rule enforcement.
A third-party code audit of vault-core + release-rule enforcement (largest line). Cloud release-rule infrastructure on Fly + Supabase. Protocol design + the proof-of-lost-wallet covenant via Nostr. Three lighthouse beta customers (seeded accounts, priority support, 90-day runway). A short team runway buffer through the 24h Renovate stability window.
Patronage. Backers gain no equity, tokens, dividends, or per-backer returns. OC Vault is a commercial product on an open-source protocol foundation (oc-lock-protocol and @orangecheck/vault-core, both MIT). Backing witnessed-recovery endorses a team building in the open, shipping working crypto, and staying open for life by design.
Your name + link in the LIGHTHOUSE.md changelog as a witnessed-recovery beta backer, early access to the v1.8 beta (7-day pre-release), and one async advisory note on the release-rule engine.
Everything above, plus your GitHub handle in the oc-lock-protocol acknowledgements (permanent), one custom ocv:// reference schema added to @orangecheck/vault-core, and a read-only review of your vault-core implementation with inline feedback.
claimed — 0 of 5
Everything above, plus a year of Family Circle gifted to you and two teammates, your org named in the v1.8 release post, and a 30-day embedded sprint (weekly syncs on release-rule edge cases, custody models, witness attestation).
claimed — 0 of 3
Everything above, plus your name on the audit cover letter, early operator access to run a secondary witness attestor on oc-lock relays in beta, and the private witnessed-recovery SDK six months before public release.
claimed — 0 of 1
rewards are fulfilled by the founder, off-platform · patronage, not equity
- multi-device sync via Nostr (v1.3)150,000 sats
Wallet-adapter signMessage + a BIP-322 device-binding statement + a kind-30078 device record — the foundation for the MV3 extension to sync keys across browser and phone over Nostr relays.
locked
- oc-load-vault-secrets GitHub Action200,000 sats
Ship the Action to the GitHub Marketplace (currently a private reference impl): resolve ocv:// refs in CI, mask output, integrate with GitHub environment secrets.
locked
- witnessed-recovery audit + hardening260,000 sats
A third-party code audit of the release-rule covenant and vault-core key unwrap, findings remediated in production, report published (redacted).
locked
- lighthouse beta to GA350,000 sats
Witnessed-recovery v1.8 graduates to general availability with a published production SLA.
locked
stretch goals are commitments the founder makes — never equity, never a return
nobody’s behind this yet
updates
No updates yet. The founder posts progress here — backers get notified.
§ id sha256:4a966f7308afb1658367aeb1ff61c1196433c0cc903a4eeb03f7daa1c76e2300