How does it handle production vs. development environments?

It utilizes built-in profile support (e.g., prod, staging, default), allowing for environment-specific secret isolation and easy profile switching.

Is the age key stored with the secrets?

No, the age key is stored separately—ideally in root-protected storage—while the encrypted secrets reside in the version-controllable fnox.toml file.

What makes fnox-secrets different from standard secret managers?

It uses age encryption for git-safe storage and integrates a triadic GF(3) system with a DuckDB catalog for mathematically verifiable security architecture.

What is the GF(3) triadic system mentioned in the skill?

It is a conservation logic used to balance entities (validator, coordinator, and generator) to ensure architectural consistency across identities and profiles.

Can I query my secrets catalog using SQL?

Yes, the skill maintains a DuckDB catalog that allows you to perform SQL queries for auditing, inventorying, and checking secret distribution.

fnox Secrets Management

Name: fnox Secrets Management
Author: plurigrid

byplurigrid

•

Security & Testing

Manages encrypted secrets using age encryption and DuckDB-based catalogs within a triadic GF(3) framework.

About

The fnox-secrets skill provides a robust framework for managing sensitive credentials securely by leveraging age encryption and a structured DuckDB catalog. It introduces a unique triadic GF(3) conservation system to ensure architectural integrity, allowing developers to store encrypted secrets in git-safe TOML files while maintaining root-protected access. This skill is ideal for teams needing sophisticated secret rotation, profile-based management (prod/staging), and algebraic data schema alignment for their security infrastructure.

Key Features

2 GitHub stars
Integrated Julia ACSet schema for formal data modeling and navigation
Secure age-based encryption for git-safe secret storage in fnox.toml
Root-protected key management patterns for high-security environments
GF(3) triadic conservation system for architectural balance and validation
DuckDB-powered secret cataloging for complex querying and auditing

Use Cases

Securing Aptos blockchain keys and sensitive API credentials with root-level protection
Integrating encrypted secret injection into automated CI/CD pipelines and shell environments
Managing environment-specific secrets across development, staging, and production profiles

About

Key Features

2 GitHub stars
Integrated Julia ACSet schema for formal data modeling and navigation
Secure age-based encryption for git-safe secret storage in fnox.toml
Root-protected key management patterns for high-security environments
GF(3) triadic conservation system for architectural balance and validation
DuckDB-powered secret cataloging for complex querying and auditing

Use Cases

Securing Aptos blockchain keys and sensitive API credentials with root-level protection
Integrating encrypted secret injection into automated CI/CD pipelines and shell environments
Managing environment-specific secrets across development, staging, and production profiles