A secret branch opens only for the identity, scope secrets and noise boundary that wrote it.
11 tests in 1 file. Run: cd Typescript && npm run test:identity-bound-secrets. Source: Typescript/tests/
11 numbered acceptance tests: cross-identity isolation, a missing scope secret, noise cutting lineage, nested scopes, save and restart, password change, lock and identity change, no plaintext in snapshots or disk files, tampering fails closed, resumable v3 to v4 migration, backup and restore.
Last result: 11 passed. Run summary 2026-10-26