Personal recovery infrastructure for private secrets.
ARKNAS combines encrypted blob storage, paper recovery, hardware authorization, and NAS workflows into a small self-hosted root node.
Boundaries
The service layer is useful only because the secret layer is not here. Cloud storage can disappear; the recovery invariant must still hold.
Encrypted blobs
ARKROOT snapshots, manifests, and backups are stored as ciphertext by default.
No root secrets
Global Root Key, wallet seed, plaintext passwords, and weak password hashes do not belong on this server.
Local authority
ArkSheet and valid ARKROOT-A/B copies remain sufficient for recovery.
Open components
Private secrets stay private while protocols, formats, and apps can be audited.
BP1 updates
Firmware update metadata is published as signed manifests for device-side verification.
Status
This public node is a lightweight demo endpoint for the ARKNAS Cloud direction.