OC Vault

A Bitcoin-identity-bound encrypted vault — no account, no master password, no lock-in. Cloud sync prepaid in sats over Lightning.

WilVerified on 2026-06-23, no public proofbitcoinpasswordsencryption

Team

Built by OrangeCheck on oc-lock-protocol — the cryptographic envelope format (v2.0, stable since 2026-04) for zero-knowledge secret storage bound to Bitcoin addresses (Flow 4, the self-vault 'password manager' pattern). The protocol and @orangecheck/vault-core are MIT, open for life by design.

Traction

Shipped v1.0 on 2026-05-12; Lightning receiving live since 2026-05-30. Stack: Next.js 15.5 + React 19 + Tailwind 4 on Vercel, Supabase + self-hosted BTCPay on Fly, 111 unit tests passing. Live: unlimited entry types (password, note, TOTP, API key, kv, card, identity, file, seed phrase, env-var bundles); AES-256-GCM end-to-end encryption; local-first IndexedDB; team vaults with roles (owner/admin/member/viewer); cloud sync with conflict detection; a vault-health audit with a Have-I-Been-Pwned k-anonymity breach scan; command-palette search; passphrase-encrypted backup/restore; CSV import from 1Password/Bitwarden/LastPass/Chrome; portable .lock envelope export (MIT SDK). Developer platform shipped: @orangecheck/vault-core (entry model + ocv:// refs) and @orangecheck/vault-cli (login/sync). Lightning only, 210k-sats lifetime cap.

The ask

Seed the witnessed-recovery SKU (v1.8). The Flow-4 self-vault pattern is proven; the next tier adds a timelocked recovery shard — sealed to OC's device key with a release rule (a BIP-322 wallet-loss declaration plus a 14-day delay), where OC sees ciphertext only and cannot release outside the rule. Capital funds witnessed-recovery protocol hardening (proof-of-lost-wallet via a Nostr attestation contract), the cloud shard-storage service + release-rule engine on Fly, three lighthouse beta customers, and a third-party code audit of vault-core + release-rule enforcement.

Use of funds

A third-party code audit of vault-core + release-rule enforcement (largest line). Cloud release-rule infrastructure on Fly + Supabase. Protocol design + the proof-of-lost-wallet covenant via Nostr. Three lighthouse beta customers (seeded accounts, priority support, 90-day runway). A short team runway buffer through the 24h Renovate stability window.

Terms

Patronage. Backers gain no equity, tokens, dividends, or per-backer returns. OC Vault is a commercial product on an open-source protocol foundation (oc-lock-protocol and @orangecheck/vault-core, both MIT). Backing witnessed-recovery endorses a team building in the open, shipping working crypto, and staying open for life by design.

Back at a level4 tiers

oc-vault advocate5,000 sats

Your name + link in the LIGHTHOUSE.md changelog as a witnessed-recovery beta backer, early access to the v1.8 beta (7-day pre-release), and one async advisory note on the release-rule engine.

protocol contributor15,000 sats

Everything above, plus your GitHub handle in the oc-lock-protocol acknowledgements (permanent), one custom ocv:// reference schema added to @orangecheck/vault-core, and a read-only review of your vault-core implementation with inline feedback.

0 of 5 claimed

infrastructure partner40,000 sats

Everything above, plus a year of Family Circle gifted to you and two teammates, your org named in the v1.8 release post, and a 30-day embedded sprint (weekly syncs on release-rule edge cases, custody models, witness attestation).

0 of 3 claimed

witnessed-recovery underwriter100,000 sats

Everything above, plus your name on the audit cover letter, early operator access to run a secondary witness attestor on oc-lock relays in beta, and the private witnessed-recovery SDK six months before public release.

0 of 1 claimed

Rewards are fulfilled by the founder, off-platform. Patronage, not equity.

Stretch goals0 of 4 unlocked

multi-device sync via Nostr (v1.3)150,000 sats
Wallet-adapter signMessage + a BIP-322 device-binding statement + a kind-30078 device record — the foundation for the MV3 extension to sync keys across browser and phone over Nostr relays.
Locked
oc-load-vault-secrets GitHub Action200,000 sats
Ship the Action to the GitHub Marketplace (currently a private reference impl): resolve ocv:// refs in CI, mask output, integrate with GitHub environment secrets.
Locked
witnessed-recovery audit + hardening260,000 sats
A third-party code audit of the release-rule covenant and vault-core key unwrap, findings remediated in production, report published (redacted).
Locked
lighthouse beta to GA350,000 sats
Witnessed-recovery v1.8 graduates to general availability with a published production SLA.
Locked

Stretch goals are commitments the founder makes: never equity, never a return.

Nobody’s behind this yet

No cosigns yet

Be the first to get behind Wil: back or zap.

Updates

No updates yet. The founder posts progress here, and backers are notified.

id sha256:4a966f7308afb1658367aeb1ff61c1196433c0cc903a4eeb03f7daa1c76e2300