What exists now
The repo now includes a beta manifest and local pack command. It can list configured bins, scan files, write a receipt, and prepare a SkyeSecure encrypted pack for a bin so sensitive work can be protected without printing values.
npm run vault:bins:listnpm run vault:bins:pack -- --bin=devooderator-blognpm run vault:bins:pack -- --bin=skyeagents-bin
What stays beta
Import/export/deploy straight from vault bins is the future feature lane. It needs more stress proof before being sold as production. For now, Bins give us the structure, receipts, and encrypted pack path to start using the idea safely.
Security posture
Agents can read bin manifests and receipts. They must not print secrets, passphrases, bearer tokens, private unlock material, or raw env values. Any generated public page should link to gated proof or receipt IDs, not expose private content.