Packages

Per-tenant encrypted attributes for Ash resources, with cryptographic erasure.

A Rust-backed AshVault key cache and AES-256-GCM cipher that hold key material outside the BEAM heap, so eviction can actually zero it.