Most AI databases can read you.

This one is designed not to.

Sealed envelopes. Blind indexes. The key never lives on the server. RAG and agent memory sit on that — not on a vendor that holds plaintext at query time.

We did not ship new crypto in 1.3.1. We shipped the rule, in the open:

Default is strong. You can weaken it. It holds if you keep the key.