Secrets & Vault
OpenBao: the centralized secrets manager and key custody.
Secrets & Vault is OpenBao (an open-source Vault fork): centralized secret storage and key custody for the whole platform. Along with identity and DNS, the vault is backbone infrastructure that always stays Runline-centralized, even for a self-hosted deployment.
What it holds
Every credential the platform uses lives in the vault, not in code, not in environment files, not in a Runner's context: the scoped keys the Grid issues per vendor and per agent, service credentials, and the secrets that back each connection. A Runner never sees a raw secret; it presents its identity, and the vault releases only what that identity is scoped to.
Custody and rotation
Keys are issued, scoped, and rotated from one place, which is what makes the kill-switch real: disabling a key at the vault takes it off the Grid everywhere at once. Centralizing custody is deliberate. Identity, DNS, and the vault are the backbone that stays with Runline, so the control plane, and the ability to revoke, is never fragmented across tenants.