One of the group library's key-value stores, sealed to the account. The
library keeps group secrets, its own signing keys and pending invites in
these stores; kernl writes each store to storage as one value that the
account signer encrypted to itself with nip44, split into parts NIP-44
can carry. Nothing readable reaches storage, so the key rule in
SOUL.md opinion 1 holds for every secret the library generates (D-018).
The store is decrypted once and then served from memory, so an extension
or remote signer is asked once per store per page load. Writes are applied
in order.
One of the group library's key-value stores, sealed to the account. The library keeps group secrets, its own signing keys and pending invites in these stores; kernl writes each store to
storageas one value that the account signer encrypted to itself withnip44, split into parts NIP-44 can carry. Nothing readable reachesstorage, so the key rule inSOUL.mdopinion 1 holds for every secret the library generates (D-018).The store is decrypted once and then served from memory, so an extension or remote signer is asked once per store per page load. Writes are applied in order.