09:14day shift

the use case

Your agent works
the tickets.

11:32day shift

nine to five

Most tickets need no secret at all.

ticket queue · claude

#4817password resetresolved

#4818where is my orderresolved

#4819update billing emailresolved

#4821refund: charge disputeneeds the database

14:01day shift

ticket #4821

This one needs a credential.

claude → requests prod/support-db

14:02day shift

the responder group is pinged

A human looks, and approves.

responders · on call

prod/support-db

ticket #4821 · 14:02

Approve

Approved

✓ released for one use

14:02day shift

one use, then gone

refund issued · ticket #4821 resolved · lease expired

03:00night shift

Then, at 3am,
another request.

03:02night shift

the same secret · the wrong hour

No human is awake. The gate still is.

claude → requests prod/support-db

03:02night shift

the responder group is pinged

This wasn't us. Deny.

responders · on call

prod/support-db

03:02 · off-hours

Approve

Deny

Denied

✗ nothing released

03:02night shift

the secret never moved

denied · prod/support-db stays sealed · only ciphertext on disk

Your agent works around
the clock. Your approvers
still decide.

stillvault

stillvault.ai