# SecretumVault page — Post-Quantum Secrets Vault

# Hero
secretumvault-badge = PQC Production-Ready | Rust 1.75+ | Cedar ABAC | 50+ Tests
secretumvault-tagline = Post-Quantum Cryptographic Secrets Vault
secretumvault-page-title = Post-Quantum Secrets Vault for Modern Infrastructure
secretumvault-page-subtitle = Production-ready ML-KEM-768 + ML-DSA-65 with Cedar policy authorization, pluggable crypto backends, and multi-cloud storage. Deploy post-quantum cryptography today. One config line to enable PQC. No code changes.

# Why
secretumvault-why-title = Why SecretumVault
secretumvault-problem-title = The Problem
secretumvault-problem-desc = Current encryption will be broken by quantum computers. Most secret vaults have no PQC migration path. Cloud KMS vendors lock you in. Policy languages are proprietary and ACL-based.
secretumvault-solution-title = The Solution
secretumvault-solution-desc = Cryptographic agility through pluggable backends. ML-KEM-768 + ML-DSA-65 work today via OQS. Cedar policies are portable. Multi-cloud storage prevents lock-in. Switch backends via config — no recompilation.

# Features
secretumvault-features-title = Core Capabilities
secretumvault-feat-pqc-title = Post-Quantum Cryptography
secretumvault-feat-pqc-desc = ML-KEM-768 (FIPS 203) key encapsulation and ML-DSA-65 (FIPS 204) digital signatures via OQS. NIST compliance verified. Hybrid classical+PQC mode in development.
secretumvault-feat-engines-title = Secrets Engines
secretumvault-feat-engines-desc = KV (versioned), Transit (encryption-as-a-service), PKI (X.509 certificates), Database (dynamic credentials for PostgreSQL, MySQL, MongoDB). Extensible via trait.
secretumvault-feat-storage-title = Multi-Backend Storage
secretumvault-feat-storage-desc = etcd (distributed HA), SurrealDB (document + graph with MVCC), PostgreSQL (ACID), filesystem (dev/test). Pluggable via StorageBackend trait.
secretumvault-feat-cedar-title = Cedar Authorization
secretumvault-feat-cedar-desc = AWS Cedar policy language for attribute-based access control. Context-aware decisions: IP allowlisting, time-based access, environment constraints. Policy-as-Code.
secretumvault-feat-cloud-title = Cloud-Native
secretumvault-feat-cloud-desc = Kubernetes-ready with Helm charts. Docker multi-stage builds (<50MB). Prometheus metrics, structured logging with correlation IDs. NATS event bus for lifecycle notifications.
secretumvault-feat-enterprise-title = Enterprise Ready
secretumvault-feat-enterprise-desc = TLS/mTLS, Shamir Secret Sharing (2-of-3, 3-of-5), token management with TTL/renewal/revocation, full audit logging for SOC2/GDPR/HIPAA compliance.

# Tech stack
secretumvault-tech-stack-title = Technology Stack

# CTA
secretumvault-cta-title = Deploy post-quantum cryptography today
secretumvault-cta-subtitle = Rust-native | Apache 2.0 | Self-Hosted | Multi-Cloud
secretumvault-cta-explore = Explore Git Repo