Vaults give Crater real boundaries around the systems that matter most.
With great power comes great responsibility. Vaults are built for the moment where Crater needs access to act, but you still need confidence about what it can see, touch, and remember.
Keep secrets sealed, approvals explicit, and high-trust workflows usable enough that your team will actually adopt them.
Sensitive execution without turning security into theater.
Vaults keep the sharp edges visible: secrets stay sealed by default, actions can pause for approval, and the path from request to execution stays legible after the fact.
Keep secrets sealed until execution time.
Credentials, tokens, and account context can stay behind a vault boundary instead of getting sprayed into prompts and notes.
Crater can request the minimum access it needs right when a workflow crosses that line.
Pause at the exact approval checkpoint that matters.
Not every workflow deserves a meeting and not every workflow deserves autonomy.
Vaults let you define the narrow moment where Crater should stop, ask, and continue with context still attached.
Leave behind an action trail people can actually inspect.
Vault-heavy work is only trustworthy if the boundaries are understandable after the moment has passed.
Crater records what was requested, what was approved, and what was executed without flattening all of it into noisy admin work.
The final layer is what makes Vaults usable day to day.
Good boundaries should tighten risk without making the product feel ceremonial. These details keep Vaults practical for the people who have to live inside them.
Time-boxed access
Open access for a specific handoff or recovery moment, then let it close without manual cleanup.
Policy shaped to the task
Different workflows can require different boundaries, instead of forcing one blunt security posture.
Reviewable by default
People can understand what happened and why without reconstructing it from logs after something goes wrong.
Put tighter boundaries around your most trusted workflows.
Vaults give Crater a safer way to cross into sensitive systems without turning every action into a manual ritual.