Identity · Coming soon
API Key Manager
Hashed key storage, scoped permissions, and zero-downtime rotation — the key lifecycle most teams hand-roll and get wrong.
What it defends
HARDENED is scored on the four universal axes. Where an axis falls outside this module’s job it is marked N/A and justified in the security design doc — never quietly skipped.
| Judgment axis | FREE | HARDENED |
|---|---|---|
| 1 · Access Control | — | ✓ Planned. |
| 2 · Input & Abuse Defense | — | ✓ Planned. |
| 3 · Safe Failure | — | ✓ Planned. |
| 4 · Accountability | — | ✓ Planned. |
FAQ
Is it really a one-time payment?
Yes. You pay once and receive every future update of that module for free — there is no subscription, and no per-seat or per-request billing. New versions are pushed through Gumroad to everyone who bought the module.
What exactly does HARDENED add over the FREE core?
FREE is the core algorithm, published so you can read and verify the approach. HARDENED is the production layer around it — everything in the deliverables table above: the SDK, the Docker image, the operational defenses, and the security design doc that explains why each decision was made.
What license is the FREE core under?
SSPL. You can read, run, and verify the core algorithm in the open. The license blocks repackaging it as a competing commercial service; normal use inside your own product is fine.
How is the module delivered, and what do I get at checkout?
Through Gumroad. After checkout you receive a download with the source, the Docker image reference, and your license key by email — there is no separate account to manage on this site.
What if it doesn't fit my stack?
Read the FREE core first. It is public precisely so you can confirm the design and the integration shape before paying for HARDENED — if the approach doesn't match your stack, you'll know before you buy.
How do I get support and security updates?
Every module ships with a security design doc covering intended behavior and trade-offs, and update notes are published with each release. AUDITED modules add 30 days of email security Q&A; HARDENED does not include bespoke support.