Skip to main content

TIBET Vault

The Open Standard for Time-Locked Disclosure & Dead Man's Switches

HTTPS = Trust in Connection TIBET = Trust in Time

PyPI version License: MIT Python 3.8+


What is TIBET Vault?

TIBET Vault is a cryptographic time capsule system. Lock secrets until a specific date, or set up a dead man's switch that auto-unlocks if you stop checking in.

Use cases:

  • Whistleblowers: "If I don't check in for 30 days, release this to journalists"
  • AI Audit Trails: Immutable proof of what an AI decided and why
  • Intellectual Property: Timestamp your ideas with cryptographic proof
  • Estate Planning: Messages to loved ones, unlocked on specific dates
  • Journalism: Embargo content until publication date

Installation

pip install tibet-vault

Quick Start

Create a Time-Locked Vault

from datetime import datetime
from tibet_vault import create_vault

# Lock a secret until 2030
vault = create_vault(
    owner="alice",
    content="The secret recipe for success...",
    public_note="Letter to my future self",
    unlock_at=datetime(2030, 1, 1)
)

print(f"Vault created: {vault['vault_id']}")
# Content is encrypted. Nobody can read it until 2030-01-01.

Create a Dead Man's Switch

from tibet_vault import create_vault, heartbeat

# Auto-unlock if no heartbeat for 30 days
vault = create_vault(
    owner="bob",
    content="In case something happens to me...",
    public_note="Dead man's switch - disclosure vault",
    dead_man_switch_days=30,
    beneficiaries=["alice", "charlie"]  # They get access if triggered
)

# Bob must send heartbeats to keep it locked
heartbeat(vault['vault_id'], "bob")
# If Bob stops sending heartbeats, vault auto-unlocks after 30 days

Check and Retrieve Content

from tibet_vault import get_vault_content, check_and_unlock

# Check if any vaults should unlock
unlocked = check_and_unlock()
for v in unlocked:
    print(f"Vault {v['vault_id']} unlocked: {v['reason']}")

# Get content (only works if unlocked and you're a beneficiary)
result = get_vault_content("vault_abc123", "alice")
if result["success"]:
    print(f"Secret: {result['content']}")

CLI Usage

# Create a time-locked vault
tibet-vault create alice "My secret" "Future letter" --unlock-at 2030-01-01

# Create a dead man's switch
tibet-vault create bob "Disclosure content" "DMS" --dead-man-switch 30

# Send heartbeat
tibet-vault heartbeat vault_abc123 bob

# Check for unlocks
tibet-vault check

# Get content
tibet-vault get vault_abc123 alice

# List vaults
tibet-vault list
tibet-vault list alice  # Filter by owner

How It Works

Encryption

  • Content is encrypted using Fernet (AES-128-CBC with HMAC)
  • Keys derived via PBKDF2 with 100,000 iterations
  • Each vault has a unique salt
  • Master key from environment or auto-generated

Proof of Existence

  • SHA-256 hash of original content stored as proof
  • Proves content existed at creation time
  • Hash is visible before unlock, content is not

Storage

  • Default: Local file storage (~/.tibet-vault/)
  • Extensible: Implement VaultStorage for custom backends
  • Enterprise: Contact us for cloud-hosted managed vaults

Security Considerations

  1. Set a strong master key via TIBET_VAULT_KEY environment variable
  2. Backup your vault files - lost files = lost secrets
  3. Dead man's switch: Automate heartbeats for reliability
  4. This is the Community Edition - see Enterprise for HSM support

Enterprise Usage

Need more? SymbAIon Enterprise Vault offers:

Feature Community (Free) Enterprise
Time-lock ✅ ✅
Dead man's switch ✅ (self-hosted) ✅ Managed
Storage Local files Cloud HA
Encryption Software keys HSM hardware
Multi-signature ❌ ✅ 3-of-5 unlock
Audit logs Basic Legal-grade PDF
Compliance - SOC2, GDPR
Support Community 24/7 SLA

Contact: https://humotica.com | https://symbaion.eu


Part of the HumoticaOS Ecosystem

TIBET Vault is part of the JIS (Jasper Intent Security) stack:

  • ainternet - AI-to-AI communication protocol
  • mcp-server-tibet - Trust & audit for AI
  • kit-pm - AI-aware package manager
  • tibet-vault - Time-locked disclosure (you are here)

Philosophy

"SSL secures the connection. TIBET secures the timeline."

In a world of AI-generated content and deep fakes, proof of time becomes invaluable. TIBET Vault provides cryptographic guarantees about when something was created and when it should be revealed.

Built with love by the HumoticaOS family.

One love, one fAmIly 💙


License

MIT License - Use it, fork it, build on it.

See LICENSE for details.

Metadata

Release files for tibet-vault 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for tibet-vault 0.1.0
File Size Uploaded Provenance
tibet_vault-0.1.0.tar.gz 9.6 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for tibet-vault 0.1.0
File Interpreter ABI Platform
tibet_vault-0.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 20.1 kB

Release files / tibet_vault-0.1.0.tar.gz

Download URL tibet_vault-0.1.0.tar.gz
Size 9.6 kB
Tags Source
SHA-256 checksum
How to use checksums
00cdc82e8415eff594850de428c4e411cf93722e917f38ee201dc6766d0b6b8f
BLAKE2b-256 checksum
How to use checksums
e2503b2ba0ad0ef638e63b2abcab3531f9580d9f999eff0dd615a0eb1d3a3087
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.5

Release files / tibet_vault-0.1.0-py3-none-any.whl

Download URL tibet_vault-0.1.0-py3-none-any.whl
Size 10.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
3af5bf92c29b701bb04951d3b726c32c15af57cfae6f318a0fcd4235dcb833a1
BLAKE2b-256 checksum
How to use checksums
18bdac6f9f23954fb1b5b3bcefe616b7166ed6d171e28d0678a9a6de9d9165cd
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.5

Security for tibet-vault 0.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page