Designing a Secrets Manager Assuming the Database Will Be Leaked

Assume the database is gone. An attacker just dumped Postgres. They have every ciphertext, every nonce, and every project salt. This is the baseline threat model for Vaultify. The system guarantees th