The Vault is governed by the Covenant of Custody.
The Vault is the sovereign-grade discipline of digital asset succession and generational custody — the architecture that addresses the $3.2 trillion systemic risk of digital asset loss through inadequate succession planning. A synthesis of cryptography, law, and fiduciary governance, engineered for the seven generations. No single hand, room, or jurisdiction ever holds the whole.
The House does not speak of password managers or cold storage. Those are the language of those who believe digital custody is a technical problem. The House speaks of generational custody — the sovereign-grade discipline by which the keys, the shards, the covenants, and the successions of the House are held across the seven generations.
The Vault addresses the $3.2 trillion systemic risk of digital asset loss through inadequate succession planning. It is not a product. It is a synthesis — of cryptography, law, and fiduciary governance, engineered so that no single hand, no single room, and no single jurisdiction ever holds the whole.
The House plans for the death of every person it trusts — including its own. The key survives its keeper because the architecture is built on the irrevocable trust deed, the five shards of Shamir, the three sovereign vaults, and the named Legacy Guardians. What is held in the Vault outlives the keeper; what outlives the keeper is the House.
The Vault fragments every master key into five shards using Adi Shamir's Secret Sharing scheme. Any three shards reconstruct the key; any two or fewer reveal nothing. Three shards travel; two rest. No person, room, server, or state ever holds the whole — including the House itself.
No single point of compromise. No single jurisdiction of control. No single hand that holds the whole.
The most sensitive data of the House is held in three sovereign vaults — each in a different jurisdiction, each under a different legal framework, each guarded by a different custodian. No single vault holds the whole. No single jurisdiction commands all three. The distribution is the discipline; the discipline is the sovereignty.
The Swiss Vault holds Shard I of the master key and the Tier II regulatory data of European counterparties. Governed by the Swiss Federal Act on Data Protection (FADP) and the banking secrecy traditions of the Confederation. Custodied by the Keeper of the Vault under the dual control of the Governance Warden.
The Singapore Vault holds Shard II of the master key and the Tier II regulatory data of APAC counterparties. Governed by the Personal Data Protection Act (PDPA) and the Monetary Authority of Singapore (MAS) frameworks. Serves as the default seat of arbitration under SIAC rules.
The Cayman Vault holds the primary shard of the master key, the constitutional records of the House, and the Stone itself. Governed by the Cayman Islands Data Protection Act and the constitutional domicile of Bastion Institution Services Ltd. Seat of the Chamber of Principals and the Officer of the Stone. The Vault of Vaults — what is held here is held in perpetuity.
The Vault is composed of six sovereign-grade elements — foundation, distribution, medium, wrapper, insurance, and activation. Each element is non-negotiable. Each element is assayed quarterly. Each element is engraved on the stone.
Most systems die because they are tied to a single substrate — a vendor, a format, a machine, a state. The House writes its critical record in four, so that the failure of any three still leaves one witness. The four substrates are the thousand-year principle made real.
Fast, searchable, encrypted, and assumed mortal. The substrate of the present — replaced every generation, never trusted alone. The digital record that serves the hour but not the century.
The plated shard, legible without power, indifferent to fire. The substrate of custody — held in the three sovereign vaults of the House. Bastion Steel plates, engraved by hand, tamper-evident.
The engraved register, slow, public, and nearly impossible to alter quietly. The substrate of permanence — kept by the Officer of the Stone. What is engraved at 18:00 daily cannot be unwritten.
The signed original, because courts still read what hands have held. The substrate of enforceability — the covenant made tangible, the trust deed that binds the shards across jurisdictions.
The Vault is not opened in crisis. It is opened in protocol. Six sovereign-grade stages govern the activation of the master key — from the triggering event to the final transmission. Each stage is named, each stage has a named officer, and each stage is engraved on the stone.
The Vault is governed by eight named officers and five Legacy Guardians — each responsible for a shard, a vault, or a stage of the succession protocol. Each officer swears the daily oath; each oath is engraved on the stone.
The covenant that binds every shard, every vault, every substrate, and every Legacy Guardian into a single discipline of generational custody.
I, the undersigned officer or Legacy Guardian of the House, do swear that I shall hold the shards of the master key with discipline, with precision, and with reverence for the seven generations who will inherit them.
I shall never hold the whole. I shall never reveal my shard to any unauthorized party. I shall transmit my shard only under the Covenant of Custody and the Irrevocable Trust Deed. I shall plan for my own death and the death of every person I trust. I shall ensure that the key outlives the keeper, the keeper outlives the generation, and the generation outlives the century.
What is held is transmitted. What is transmitted is permanent. What is permanent is the House.
The House plans for the deathFive Shards · Three Sovereignties · Four Substrates · One Covenant
of every person it trusts —
so that the institution never has to.
Five Shamir shards. Three sovereign vaults. Four substrates of permanence. Six succession stages. Eight named officers. Five Legacy Guardians. $500M Lloyd's aggregate. 175-year horizon. The Vault is the sovereign-grade discipline of digital asset succession and generational custody — the architecture that addresses the systemic risk of digital loss by ensuring that no single hand, no single room, and no single jurisdiction ever holds the whole. What is held is transmitted; what is transmitted is permanent; what is permanent is the House.