BengarTrust infrastructure

Docs · Concepts

Custody

Where signing keys live — and why an outage there is not an outage here.

What it is

Bengar Custody is a separate service holding approval keys and organization chain signing keys, encrypted at rest under a key encryption key that is not in its database.

Custody is not authorization

Custody down does not mean authorization down. The Gateway decides without it; Custody is reached only when something has to be signed. An approval ceremony cannot complete during a Custody outage, and ordinary authorization and execution continue.

Related