Seal Pipeline: age Encryption + Threshold Key Splitting
ReMemory’s sealing stage generates a high-entropy secret and encrypts the manifest with age in passphrase mode, strictly separating ciphertext artifacts from plaintext files. It then applies Shamir threshold secret sharing to split the secret into N shares with a threshold T, turning decryption from a single-person permission into a multi-person collaboration condition. The security boundary is explicit: any set smaller than T carries zero information about the secret in an information-theoretic sense. Operationally, this shifts risk from “one person has everything” to “unlock only happens when the threshold cooperates,” which matches long-horizon threat models.
