# GovOPlaN Identity Trust Codex Guide

## Scope

This module owns public device keys, assurance evidence, trust epochs, and
auditable key-access decisions. Access owns authentication and authorization;
Encryption owns key custody and rewrapping. Never persist private keys or
plaintext content here.

## Documentation Contract

- Update manifest-driven user/admin documentation with behavior changes.
- Keep Gitea issues as the delivery source of truth.
- Do not claim cryptographic protection or certification from trust metadata.