Module custody 

Master-key custody: where the store’s master keyring is unlocked from, where a newly established or rotated one is written, and how it is removed. KeyCustody is the policy a host selects on the builder; KeyCustody::resolve turns it into the MasterKeyCustody trait object coven drives the rest of the sync engine through.

Structs

Passphrase

A memorized secret that wraps a payload under Argon2id. Held zeroizing — the whole struct is cleared on drop, so no copy of the passphrase outlives it.

Enums

KeyCustody

How a store’s master key is protected. The builder accepts this and never sees a cipher again — coven resolves the selection into a MasterKeyCustody and builds every cipher from what it supplies.