Docs · Concepts
Custody
Where signing keys live — and why an outage there is not an outage here.
What it is
Bengar Custody is a separate service holding approval keys and organization chain signing keys, encrypted at rest under a key encryption key that is not in its database.
Custody is not authorization
Custody down does not mean authorization down. The Gateway decides without it; Custody is reached only when something has to be signed. An approval ceremony cannot complete during a Custody outage, and ordinary authorization and execution continue.