Gatewarden Nexus
Docs
Plugins
What's new
Roadmap
Tools
Your Nexus

OpenCode Plugin

nexus-vault-shield

v0.1.0Alpha

Classification-driven encryption for documents and project artifacts based on customer/project confidentiality levels.

Overview

Enforces encryption policies automatically based on the confidentiality level defined on customers or projects. Supports at-rest AES-256, field-level encryption with external KMS providers (AWS KMS, GCP Cloud KMS, HashiCorp Vault), and automatic watermarking on PDF exports. Every decrypt operation is logged to the audit trail.

Registered Hooks

document.upload

Intercepts document uploads and applies encryption based on the project confidentiality level before storage.

document.export

Applies watermarking and access controls to PDF exports based on classification level.

Custom Tools

nexus_encrypt_status

Reports encryption status and classification level for a given document or project.

Details

KMS ProvidersAWS KMS, GCP Cloud KMS, HashiCorp Vault, or built-in AES-256.

Plugin Info

Version
v0.1.0
Hooks
2
Custom Tools
1

Alpha Plugin

This plugin is in active development. Source code will be published when the plugin reaches beta status.

All pluginsBack to tools

Get started

Ready to put specifications first?
Start building with Nexus.

Governed specs drive your agents. No ad-hoc prompts, no vibe coding.

Sign in with GitHub
Gatewarden Nexus

Platform

  • Documentation
  • Tools
  • What's new
  • Roadmap
  • Pricing

Resources

  • MCP Server
  • CLI
  • GitHub

Company

  • RelicFrog
  • Imprint

Legal

  • Privacy policy
  • Terms of service
© 2026 RelicFrog Holding UG (haftungsbeschränkt)·v0.17.2 (aea217e)
a Gatewarden product by RelicFrog Holding UG