Single-file vault for the Android and iOS app: PIN, hardware-bound
wrapping key and random data key kept separate, optional word-based
recovery slot, fixed-size blocks and a reversed-PIN duress mode whose
48-hour lock is enforced by the release switch contract.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
