Universal vendor credentials

Schema-driven vault for every AerVox vendor. Values posted directly to the Cloudflare Worker. Nothing transits chat, AI APIs, or analytics.

Endpoint

AerVox Core Worker route. Stored locally only.

Vault write URL

X-Core-Key

Remember endpoint URL on this device localStorage only. Core key never persisted.

Expand a vendor card to fill credentials. Fields default to production; toggle sandbox for test keys.

Behavior on write.

Log rotation to secret_rotation_logPer-key audit row with timestamp and source.

Archive prior value to R2 before overwriteArchive-Never-Delete Law compliance.

Bible the rotation eventInserts row into aervox_bible with vendor + environment + key list (values never written).

Write payload preview 0 keys queued

Expand a vendor and fill at least one field to see the queued write.