Core concepts

Hikyo is designed around a small set of rules that stay visible in the API, browser UI, CLI, audit trail, and storage model.

The short versionCopy Anchor Link

1. Scope every value to one organisation, project, and environment.
2. Declare a key before writing its value.
3. Treat absent as real state, not a missing default.
4. Reveal secret plaintext only through an explicit disclosure action.
5. Grant narrow capabilities to a principal at a named scope.

Values do not inheritCopy Anchor Link

A key declaration defines what a value means. Each environment then records its own state as either set or absent. Development cannot silently supply a default to production, and an empty cell is never ambiguous.

Secrets are a separate disclosure pathCopy Anchor Link

Ordinary reads return classification and presence, not secret plaintext. Revealing or copying a secret is a deliberate disclosure under current authorization and the applicable reauthentication policy, with a short browser remask window and its own audit event. Replacing a secret does not require reading its current value.

Validation gates publicationCopy Anchor Link

Declarations distinguish configuration from secrets and attach validation and presence rules. Editing saves a private draft, including incomplete or invalid work. Delivery keeps the published state until an explicit publication succeeds. Publication validates the selected changes and resulting environment state; it refuses required values left absent and incomplete all-or-none groups.

Authorization has one chokepointCopy Anchor Link

Human sessions, machine identities, and local break-glass operations enter by different routes, but resource access is evaluated against the same explicit capability and scope model. Unauthorized resources remain indistinguishable from resources that do not exist.

Audit records describe the decisionCopy Anchor Link

Security-sensitive events record the actor, object, outcome, and decision context without recording secret material. Local-host recovery actions remain distinguishable from ordinary network-authorized changes.

Go deeperCopy Anchor Link

• Architecture explains the process and trust boundaries.
• Hierarchy explains organisations, projects, and environments.
• Values and secrets explains declarations and disclosure.
• Identity and access explains principals and capabilities.