Everything behind this screen is encrypted at rest. Only the admin passphrase decrypts the plain text — the locked grid shows tokens and color tags, never content.
The vault is real: AES-256-GCM at rest, decryption gated server-side behind the admin session. Nothing connects to live accounts until the counsel checklist clears (LIVE_SEND_ENABLED off).