Note: Vaulted mode is intended for archival keys, legal holds, and zero-day exploits—not database workloads. NFS-VLTED assumes the storage server is untrusted . Clients perform Merkle tree verification of every block before decryption. The server cannot tell if it is serving a real file or a decoy—because every VLTED request is padded to a uniform 1 MB chunk, and dummy traffic is generated during idle periods.
$ nfs-vlted mount -t vlted -o vault-level=2,proof-difficulty=18 /srv/blackbox /mnt/vault Mounted at /mnt/vault (VLT-2 active). Estimated read latency: 180-220ms. $ cat /mnt/vault/launch-codes.txt [Solving proof-of-work... done.] NFC-7G-88Q-REDACTED nfs-vlted