โ† All blog posts

Chat & private sharing

Coves

Encrypted vaults for the things that don't belong in a repo: notes, credentials, plans. Documents live inside authenticated ciphertext, and every unlock is recorded in an access log the creator can audit.

Feature 49 of 72AES-256-GCMChat & private sharing3 min read
Abstract ForkMesh artwork for Coves

Why it matters

Coves gives ForkMesh a concrete mechanism for encrypted vaults for sensitive project material that does not belong in Git. Encrypted vaults for the things that don't belong in a repo: notes, credentials, plans. Documents live inside authenticated ciphertext, and every unlock is recorded in an access log the creator can audit.

Project conversations often carry design, access, and coordination context that infrastructure should not read. In ForkMesh, coves addresses that need at the feature level, keeping the behavior close to the repository instead of buried in a detached hosted layer.

How ForkMesh handles it

ForkMesh handles coves through the same split it uses across the product: ForkMesh attaches rooms, direct messages, discussions, and browser chat to repository identity while encrypting sensitive payloads before relay.

The behavior is intentionally narrow: Encrypted vaults for the things that don't belong in a repo: notes, credentials, plans. Documents live inside authenticated ciphertext, and every unlock is recorded in an access log the creator can audit. This vault boundary does not make default room chat end-to-end encrypted.

Title focus: Coves stays tied to encrypted vaults for sensitive project material that does not belong in Git and the local-first repository model.

Where it fits

Use coves for access-controlled project material that should not live in Git.

It pairs with the rest of Chat & private sharing because Coves keeps encrypted vaults for sensitive project material that does not belong in Git connected to the repository, its signatures, and the nodes that serve it.