Everything stays sealed inside. Only a scoped, expiring permit ever leaves it.
Sealed where nobody can read it, not even us.A permit for one task: these sites, this much, this long.The agent does the job and hands back the receipt.When the window closes, it closes. Hardware enforces it.
Move over the glass.
It doesn’t. It never touches the key — it just asks Tansu to do the job. Flip the switch to see the difference.
Not even we can open it. If we were ever forced to hand over what we hold, all we could give is sealed data we have no key for. How that works