WATCHMAN : VAULT
CRITICAL DOCUMENT SECURITY  ·  MODULE 03
COMMAND SUITE
MODULE 01  ·  VAULT
Document Registry
Inventory all critical documents — deeds, titles, insurance, wills, passports, military records, and legal instruments.

VAULT has the broadest audience of any module in the suite — every household needs this regardless of preparedness level. Document where every critical piece of paper lives, whether a certified copy exists, and where it is stored. In a house fire, flood, or forced evacuation, knowing exactly what you have and where it is saves everything. Use Priority Tier 1 for documents that cannot be replaced without significant hardship (passports, deeds, wills). Update annually.

+ ADD DOCUMENT
MODULE 02  ·  VAULT
Financial Accounts
Document all financial accounts — banks, investments, retirement, insurance, debts, and digital payment platforms.

In a crisis, families often cannot access funds because account information is only in one person's head. Document every account with institution name, account type, approximate balance category, how to access it, and who else has access authority. Do not store full account numbers or passwords here — use descriptive references that only your family would understand, and store full credentials separately in physical encrypted form.

+ ADD ACCOUNT
MODULE 03  ·  VAULT
Medical Records
Document critical medical information for every family member — chronic conditions, current prescriptions, allergies, providers, and insurance.

When you are evacuated to a shelter or receiving care from someone who doesn't know you, your medical history travels with you or it doesn't exist. Document conditions, medications with dosages, allergies with reaction types, and how to reach your regular providers. Your records function as the written history your medic needs when you are unable to speak for yourself.

+ ADD MEMBER
MODULE 04  ·  VAULT
Family Instructions
Write the letter your family needs if you are incapacitated or unreachable — where things are, who to call, what to do.

This is the hardest module to fill out and the most important. Write specific instructions for your family: where the document registry is, who the attorney is and how to reach them, what accounts exist and how to access emergency funds, where the emergency supplies are, who to call in the preparedness network, and what the bug-out plan is. Update this letter annually. Print it, sign it, and put it somewhere your family knows to look.

+ ADD INSTRUCTION
MODULE 05  ·  VAULT
Quick Reference Card
Data for the laminated wallet card — key contacts, account reference codes, and emergency instructions.

The wallet card is a single laminated card that goes in every adult family member's wallet. It contains enough information to access emergency resources and reach the right people — without containing sensitive data that would be dangerous if the wallet were lost. Use reference codes and initials rather than full account numbers or addresses.

+ ADD CARD LINE
MODULE 06  ·  VAULT
Digital Assets
Document digital accounts, online services, and credential access paths — what exists and how your family reaches it.

Digital accounts are entirely undocumented in most preparedness plans, yet they hold financial assets, critical communications, and irreplaceable files. This module records that accounts exist and how to reach them — not the passwords themselves. Use reference codes, not credentials. Note where actual passwords are stored (e.g., "LastPass vault, entry labeled Home Email"). Document every account a family member would need to access in your absence. Review annually and after any major account change.

+ ADD ACCOUNT
OUTPUTS  ·  VAULT
Generate Documents
Print-ready reference outputs from your recorded data.
FULL BINDER
Print Critical Document Binder

Every module in order — documents, financial, medical, family instructions, quick reference, and digital assets — as one print-ready document, each section on its own page for three-ring tabs. A cut-out wallet card prints on the last page.

OUTPUT 1
Document Registry Summary

Complete inventory of all registered documents, sorted by category with location and copy status.

OUTPUT 2
Family Instruction Letter

Formatted letter with emergency instructions — sign and file.

OUTPUT 3
Medical Summary Cards

One card per family member with conditions, meds, and allergies.

OUTPUT 4
Wallet Quick Reference

Laminated wallet card with emergency contacts and references.

Encrypted store: ao_vault_enc_v1  ·  AES-GCM 256  ·  Export before clearing.
DOCUMENTATION  ·  VAULT
User Manual
Field guide to the WATCHMAN VAULT — what it does, how to use it, and how to print it for your binder.
WATCHMAN VAULT
Critical Document Security & Family Continuity  ·  Module 03  ·  User Manual
1  ·  What VAULT Is

VAULT answers one question your family will face in the worst moment of their lives: what critical documents and accounts exist, and where do we find them? In a house fire, flood, evacuation, hospitalization, or death, the knowledge locked in one person's head becomes worthless to everyone else. VAULT writes that knowledge down.

The guiding doctrine is pointer, not payload. VAULT records where the original deed is, where the password is stored, and who has access — not the document itself and not the password. This keeps the file safe to print, carry, and hand to family without exposing the very things you are protecting.

WHO NEEDS THIS: Every household, regardless of preparedness level. This is the broadest-audience module in the suite.
ENCRYPTION: The entire vault is encrypted at rest with AES-GCM 256. On first run you set the suite-wide Master password and receive a one-time recovery key — print it with PRINT KEY CARD or write it down. Setup then offers the optional JWBuild rescue choice: NO (the default) means only you can ever unlock the vault; YES saves a locked rescue file on this computer only, usable as a last resort if both passwords and the key card are lost — email it to JWBuild with your license key, verify identity, and receive a one-time unlock code that forces a full re-key on use. Nothing is ever transmitted either way. If rescue was declined and everything is lost, the vault cannot be opened by anyone, by design.
2  ·  The Six Sub-Modules
  • 01 Document Registry — Every critical piece of paper: deeds, titles, passports, wills, insurance, military records. Logs the original location, whether a certified copy exists, and digital-copy status. Built and active.
  • 02 Financial Accounts — Banks, investments, retirement, debts, payment platforms. References only, never full account numbers.
  • 03 Medical Records — Conditions, medications with dosages, allergies, and providers for every family member.
  • 04 Family Instructions — The letter your family reads if you are gone or unreachable. Where things are, who to call, what to do.
  • 05 Quick Reference Card — Data for the laminated wallet card every adult carries.
  • 06 Digital Assets — Online accounts and how family reaches them. Reference codes only, never credentials. Built and active.
Modules 02–05 are stubs in this build and will populate in later sessions. The data model already reserves space for them, so importing a backup that contains their data is safe.
3  ·  Adding & Editing Entries
1
Open a module from the left navigation, then click ADD DOCUMENT (or ADD ACCOUNT).
2
Fill the form. Only the name field is required — everything else is optional, fill what you know.
3
Click SAVE ENTRY. The card appears, sorted by category. Use EDIT or the to change or remove it.
4
Click the green SAVE button on the action bar to write to local storage. Entries also auto-save shortly after a change.

The status pips on each card are a quick completeness check: ORG (original location logged), CERT (certified copy exists), DIG (digital copy exists), ATT (reference photo attached).

4  ·  Reference Photos & Attachments

The Document Registry lets you attach reference photos to an entry — a shot of the safe where the original lives, the document itself for identification, or an insurance card front. Photos are auto-compressed and stored inside the VAULT file so they travel with your backup.

SECURITY & LIMITS: Everything in VAULT — entries and attachments — is encrypted at rest (AES-GCM 256) and readable only after unlock. Local storage still holds roughly 5 MB total, so use photos sparingly and as reference, not as your archive of record. Keep master scans on separate encrypted media (IronKey / VeraCrypt) and log that location in the entry.

To attach: open or edit a document, scroll to Reference Photos, click + ADD, and pick an image or PDF. Click a thumbnail to view it full size; the × removes it.

5  ·  Generating Documents

The Generate Docs screen turns your entries into print-ready references. Print Full Binder is the main one: it prints every module in order — documents, financial, medical, family instructions, quick reference, and digital assets — as a single document, with each section on its own page for three-ring tabs and a cut-out wallet card on the last page. Output 1 — Document Registry Summary prints just the document inventory when that is all you need.

Print it, punch it, and file it in your preparedness binder. Re-generate and reprint after any major change, and at minimum once a year.

Outputs 2–4 (standalone Family Instruction Letter, Medical Summary Cards, Wallet Quick Reference) are placeholders; their content already prints inside the full binder.
6  ·  Backup, Restore & Data Safety

All VAULT data lives in this browser, encrypted (AES-GCM 256) under the key ao_vault_enc_v1. It never leaves your device. That also means clearing browser data, or switching devices, will lose it unless you back up.

  • EXPORT (ENCRYPTED) — downloads watchman_vault_encrypted_backup.json, the sealed vault exactly as stored. Do this regularly; the file is safe anywhere because it opens only with your passwords. EXPORT PLAINTEXT exists for migration — treat that file as fully sensitive.
  • IMPORT (JSON) — loads a backup. This overwrites everything currently in VAULT.
  • CLEAR ALL DATA — wipes the vault. Always export first.
RULE: Export before you clear, before you update the app file, and before you trust any single device. The backup IS your continuity.
7  ·  Maintenance Schedule
  • Annually: Review every module. Verify locations are still accurate, copies still exist, providers and accounts are current. Reprint the binder copy.
  • On change: New vehicle, new account, moved the safe, renewed a passport — update the entry the same week.
  • After any backup: Confirm the JSON file actually downloaded and is stored where family can reach it.

"Knowledge creates the obligation to warn." VAULT is how you warn the people who will need this when you cannot tell them yourself.

8  ·  Demo Sandbox

VAULT ships with a demo sandbox — a separate copy pre-loaded with a completed document registry for a fictional family (the Reeds): vital documents, financial accounts, insurance, property, and a quick-reference card, all inside a working encrypted vault.

  • Opening and leaving: click DEMO in the sidebar under this manual. Inside the demo, that slot reads RETURN TO LIVE.
  • The demo vault password is demo1234 — it is printed on the demo's lock screen. Unlock and explore.
  • Your real data is safe: the demo uses separate storage slots for the vault, its rescue file, and everything else. Nothing done in the demo can touch your real VAULT.
  • Practice the ceremony: unlock with demo1234, then exercise every credential control safely — set an OPERATOR PASSWORD, rotate with CHANGE MASTER, issue a NEW RECOVERY KEY (and print it with PRINT KEY CARD), and toggle JWBuild RESCUE. A rescue file from the demo is named with DEMO so it can never be mistaken for a real rescue request.
  • Reset: the ↺ RESET DEMO button in the top bar wipes all demo data, including any password set in the demo, and restores the clean sample.