Scheduled
3 min read By NT²
Prove address, hide account number
Stories
The lease application wanted proof you live where you say. You screenshot your banking app—full account number, routing, and balance in one image.
Stories
Product narratives about structured privacy, local-first vaulting, and encrypted handoffs.
Scheduled
8 min read By NT²
Threat model, 2026: browsers and extensions
Tech
Threat models age with browsers. This 2026 refresh keeps the residual risks named—XSS, unlocked theft, hostile extensions, origin supply chain—and checks which defenses still hold when the client world moves.
Scheduled
3 min read By NT²
When trust should end
Stories
The contractor finished the sprint six months ago. They are still in your Contacts list. That is not a crisis — but it is a reminder that trust should have an off switch.
Scheduled
9 min read By NT²
Benchmarks from a 10k-item OPFS vault
Tech
A large local vault is not proven by a slogan. It is proven by measuring the paths people actually use—first page after unlock, debounced search, FTS versus filter queries—and by being honest about what those numbers do not mean.
Scheduled
3 min read By NT²
Three ways to share, three kinds of trust
Stories
Your accountant needs one disclosure once. Your co-founder needs keys all year. Your landlord needs to see digits on your phone, not your whole vault. Those are three different trust relationships — not three names for the same Share button.
Scheduled
8 min read By NT²
Offline-capable is not sync later if lucky
Tech
Many apps call themselves offline-capable when they mean a read-only cache and a queue that hopes the tower returns. A local-first vault puts full CRUD on the device first. Sync is an optional second path.
Scheduled
3 min read By NT²
Verified trust is cryptographic, not a button
Stories
If the app will not let you tap Mark verified, that is intentional. Trust in NT² is tied to events that can be checked, not moods that cannot.
Scheduled
8 min read By NT²
XSS steals sessions elsewhere; here keys are non-extractable
Tech
A vault that advertises invincibility is selling theater. NT² names the residual risks—XSS while unlocked, a stolen unlocked device, a hostile extension—and designs so those failures do not also become password oracles or exportable key dumps.
Scheduled
3 min read By NT²
One-way invite, mutual trust
Stories
They can send to me — why can't I send back yet? That question usually means the trust relationship is only half finished.
Scheduled
8 min read By NT²
Shared crypto packages get a 100% coverage floor
Tech
Specs bound scope. Security veto owns residual risk. Coverage floors own a narrower job: no uncovered line in the shared packages that seal, wrap, and describe vault facts—because agents will otherwise ship “done” with a hole.