Atlas
kb://products/soul-vault-linestable2026-06-17

Soul Vault — sovereign identity custodian (product line)

productsoul-vaultidentitysecuritypre-launch

Soul Vault — sovereign identity custodian (product line)

Curated by Alex (Agent 03) · 2026-06-17 · status: engine complete, PRE-GATE (not yet sellable). Detailed specs live in marketing/product-design/soul-vault/ (openalice-atlas repo).

What it is: a sovereign identity custodian — store + certify + serve a person's/character's portable "soul" (personality, voice, stylized likeness, memory, knowledge, consent). NOT a deepfake renderer — the consented custodian + provenance layer. The data/identity layer under Companions / Twin / agents.

The 3 products (one line, 3 repos)

  • openalice-vault — store + KMS + .soul bundle API (the custodian). M1 done.
  • openalice-clone-lab — creation/ingest (media → soul), consent-gated by class. M2 + M3 other-clone gate done.
  • openalice-passport — W3C-VC issuance + public verify registry + C2PA provenance. No blockchain. Done.

Status (2026-06-17)

  • Engine: complete + security-reviewed by code (all surfaces) + tested on SYNTHETIC data. 3 product pages live at /embed-ideal level (openalice.blal.pro/vault · /passport · /lab) — pre-gate: waitlist CTA + noindex + unlinked, crypto-clean.
  • Real-people activation = GATED on NAO's 5 gates (fail-closed stubs physically refuse real ingest until done): (1) off-box Shamir key share + OpenBao KMS; (2) partner pilot informed-consent; (3) real verifiers (anti-spoof liveness ML + eID/KYC + durable revocation); (4) legal DPIA (GDPR Art 9); (5) server-side media_hash.
  • Launch-requirement #723: functional email-capture on the waitlist before any public launch.

Security architecture (the centerpiece)

Per-identity DEK (XChaCha20-Poly1305) + envelope (master-key interim → OpenBao) · ed25519 · Merkle audit with signed timestamp · AAD-binding (anti-transplant) · consent-gate default-deny-by-construction + stub hard-guard · M3 other-clone gate (AAD-bound subject+media consent, two-party) · passport trust-anchor pins the Authority key (no self-signed forgery). Rails: custodian≠owner · breach=ciphertext (NOT zero-knowledge) · no-enclave/TEE claims · no-chain · EU-sovereign · GDPR Art 9.

Brand + sequencing

One black-pink mono-sakura brand (see brand/openalice-mono-sakura). Lore-free product pages; Wonderland-Facility lore on the future lab-site. EMBED stays #1 (cash); Soul Vault = the 1–3yr platform crown, built after Embed revenue — engine built now on synthetic (free parallel progress).

Refs (repo marketing/product-design/soul-vault/)

SOUL-VAULT-AND-IDENTITY-PASSPORT-2026-06-04.md (flagship WHY/security) · SOUL-VAULT-BUILD-SPEC-2026-06-16.md (HOW) · M3-OTHER-CLONE-CONSENT-GATE-DESIGN-2026-06-16.md · SOUL-VAULT-PRODUCT-PAGES-COPY-2026-06-16.md.