Desktop key vault for apelido and brisa: signs handles, powers of attorney, gov.br attestations, key rotations and claims, with private keys that never leave it
apelido's grants have a scope now. GrantWithCode gives one grant for each
protocol the access code names, taking back first what the app already
holds of them; Grant, for another device, still gives the one over
everything. The vault records the protocols of each grant, Revoke takes
back every one it gave, and Check counts an attorney as holding when the
chain has them all (KeyFor asks the node of one protocol's grant).
The request page and the account's list say in words what a yes gives or
gave, and warn when an app asks for everything.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Ruben M. Damião
f4407fee94