One dataset.
Infinite governed realities.

Per-section AES-256-GCM. Section keys via HKDF from a master secret wrapped by an environment KEK. Unwrapped only when authorised — never at rest.

No policy engine to consult. The data's classifications and the viewer's signed claims either intersect or they don't — computed at the moment of access.

Zeroing the wrapped key turns every copy into noise. Not “deleted,” not “marked inaccessible” — unrecoverable.

Every decision writes an HMAC-linked, hash-chained receipt. Independently verifiable without trusting NoData, the tenant, or the recipient.

The crypto envelope supports ML-KEM hybrid mode. The wrap layer rotates with no recipient action.

The viewer is a browser. WebCrypto handles decryption — on a phone, in a hotel, on a contractor's laptop.