VAULT has the broadest audience of any module in the suite — every household needs this regardless of preparedness level. Document where every critical piece of paper lives, whether a certified copy exists, and where it is stored. In a house fire, flood, or forced evacuation, knowing exactly what you have and where it is saves everything. Use Priority Tier 1 for documents that cannot be replaced without significant hardship (passports, deeds, wills). Update annually.
In a crisis, families often cannot access funds because account information is only in one person's head. Document every account with institution name, account type, approximate balance category, how to access it, and who else has access authority. Do not store full account numbers or passwords here — use descriptive references that only your family would understand, and store full credentials separately in physical encrypted form.
When you are evacuated to a shelter or receiving care from someone who doesn't know you, your medical history travels with you or it doesn't exist. Document conditions, medications with dosages, allergies with reaction types, and how to reach your regular providers. Your records function as the written history your medic needs when you are unable to speak for yourself.
This is the hardest module to fill out and the most important. Write specific instructions for your family: where the document registry is, who the attorney is and how to reach them, what accounts exist and how to access emergency funds, where the emergency supplies are, who to call in the preparedness network, and what the bug-out plan is. Update this letter annually. Print it, sign it, and put it somewhere your family knows to look.
The wallet card is a single laminated card that goes in every adult family member's wallet. It contains enough information to access emergency resources and reach the right people — without containing sensitive data that would be dangerous if the wallet were lost. Use reference codes and initials rather than full account numbers or addresses.
Digital accounts are entirely undocumented in most preparedness plans, yet they hold financial assets, critical communications, and irreplaceable files. Record every account a family member would need to reach in your absence. Import CSV bulk-loads an export from any major password manager. Credentials stored here are excluded from the printed binder unless you deliberately opt in, and print instead as a separate safe copy.
The declarations page is the controlling document. It is reissued at every renewal and it decides the outcome of any claim. Record each policy here and attach the dec page. Compare each renewal against the prior term — a dropped limit, a raised deductible, or a roof settlement basis quietly changed from replacement cost to actual cash value is a change you can push back on, but only if you notice it.
Every module in order — documents, financial, medical, family instructions, quick reference, and digital assets — as one print-ready document, each section on its own page for three-ring tabs. A cut-out wallet card prints on the last page.
Every stored username, password, security answer and recovery code from Digital Assets, printed as its own marked document. This one goes in the safe, not on the shelf.
Complete inventory of all registered documents, sorted by category with location and copy status.
Formatted letter with emergency instructions — sign and file.
One card per family member with conditions, meds, and allergies.
Laminated wallet card with emergency contacts and references.
VAULT answers one question your family will face in the worst moment of their lives: what critical documents and accounts exist, and where do we find them? In a house fire, flood, evacuation, hospitalization, or death, the knowledge locked in one person's head becomes worthless to everyone else. VAULT writes that knowledge down.
The guiding doctrine is pointer, not payload. VAULT records where the original deed is, where the password is stored, and who has access — not the document itself and not the password. This keeps the file safe to print, carry, and hand to family without exposing the very things you are protecting.
Reading is separate from editing. Click anywhere on a card and it opens as a clean read-only page: everything the entry holds, laid out in order, with nothing you can change by accident. Empty fields are left out rather than shown blank, so a sparse entry reads short. EDIT THIS ENTRY at the foot of that page opens the form; the EDIT and ✕ buttons on the card itself still work directly.
The read-only page also states what is missing, in plain language rather than as a blank space — a document with no original location recorded, a Tier 1 document with no certified copy, an account only one person can reach, a person with no blood type on file. A policy page adds its own findings, described in section 5.
The status pips on each card are a quick completeness check: ORG (original location logged), CERT (certified copy exists), DIG (digital copy exists), ATT (reference photo attached).
The Document Registry, Medical Records, and Insurance Register all accept attachments — a shot of the safe where the original lives, the document itself for identification, an insurance card front, or a full declarations page. Images are downscaled and compressed; PDFs are stored as-is.
To attach: open or edit an entry, find the attachment strip, click + ADD, and pick an image or PDF. On the thumbnail, the ⇩ saves the file back out and the × removes it.
Getting a file back. Open the entry as a read-only page and each attachment appears as a card with two buttons: VIEW opens it in a new tab, SAVE downloads it under its original filename. A stored document you cannot retrieve is not stored, it is lost, so both paths exist deliberately.
The declarations page — the dec page — is the controlling document of any insurance policy. It is reissued at every renewal, it is what a lender asks for, and it is what decides the outcome of a claim. The full contract behind it can run eighty pages; the dec page is the one or two that matter. Almost nobody reads it. Module 07 exists so that you do.
What the reader can and cannot do. A PDF downloaded from a carrier portal carries a real text layer and reads instantly. A scan or a photograph carries no text at all — it is a picture of a page — so those are read with built-in OCR, which takes a few seconds on the first run while the reader loads from disk. Black-and-white scans from office copiers use fax compression that no browser decodes; VAULT decodes it itself, so the scanner setting does not matter. Everything happens on the machine. Nothing is uploaded, and there is no network call at any point.
A mailed policy is typically a dozen pages of cover letter and state notices with the declarations page buried near the back. The reader scans every page at low resolution first, scores each one for declarations-page markers, then reads only the winners properly. It tells you which page it found. It also reads the state-notice pages, but only to harvest the filed-rate comparison and the plain statements of what the policy excludes — never a limit, a deductible or a settlement basis. A notice saying you "may be eligible for" something is an advertisement, not a statement of your coverage, and it is not treated as one.
Cards sort by renewal date, soonest first. The last pip on each card counts down: green, amber inside 45 days, red once the policy has lapsed. RENEWAL SCHEDULE on the action bar prints the whole list by expiration date with agent and claims numbers — that is the page that goes in the binder and on the refrigerator.
Perils not covered. A policy tells you what it excludes, usually in a notice nobody reads. The gaps section records each one and, more importantly, whether the gap is filled by a separate policy or simply open. An unrecorded exclusion reads exactly like a covered peril right up until the day you claim. Flood, earthquake, landslide and mudflow are the ones that matter in mountain country, and none of them are covered by a standard homeowners policy.
Premium benchmark. Several states require a carrier to disclose in writing when it charges above the filed rate. Record that figure and the module works out how far above it you are and shows it on the card. It is legal to charge above the filed rate, and common; a large loading is simply the number to take to a competing quote.
Most of VAULT follows pointer, not payload: it records where a thing is, not the thing itself. Digital Assets is the one place that can hold the payload, because for some accounts a pointer is not enough — the password manager's own master password has nowhere else to live, and an account whose recovery codes are lost is an account nobody gets back.
Each Digital Assets entry therefore has two halves. The reference fields say where the password lives and are safe to print, carry and hand to family. The stored credentials section holds the real username, password, security answers and recovery codes.
A plaintext export writes credentials in the clear and now warns you by count before it does. Treat that file as equivalent to the safe copy.
Importing from a password manager. IMPORT CSV at the top of Digital Assets reads an export from Proton Pass, Bitwarden, 1Password, LastPass, Chrome and anything else that writes the usual columns. The file is parsed in the browser and never leaves the machine.
Before anything is written you are shown what was found: how many entries, broken down by item type, how many carry a password, how many have not been changed in over three years, how many are already in the vault, and the name of any column the importer did not recognise. Nothing is imported silently.
Beyond logins, the importer keeps email aliases, secure notes and Wi-Fi entries as their own item types, keeps email and username apart rather than flattening them into one field, and preserves folders and dates. The last changed date drives a warning on any entry left alone for more than three years.
With several hundred entries the card list is capped and the search box becomes the way through it. Search covers the account name, website, address, folder and notes.
The Generate Docs screen turns your entries into print-ready references. Print Full Binder is the main one: it prints every module in order — documents, financial, medical, family instructions, quick reference, and digital assets — as a single document, with each section on its own page for three-ring tabs and a cut-out wallet card on the last page. Output 1 — Document Registry Summary prints just the document inventory when that is all you need.
Print it, punch it, and file it in your preparedness binder. Re-generate and reprint after any major change, and at minimum once a year.
All VAULT data lives in this browser, encrypted (AES-GCM 256) under the key ao_vault_enc_v1. It never leaves your device. That also means clearing browser data, or switching devices, will lose it unless you back up.
watchman_vault_encrypted_backup.json, the sealed vault exactly as stored. Do this regularly; the file is safe anywhere because it opens only with your passwords. EXPORT PLAINTEXT exists for migration — treat that file as fully sensitive."Knowledge creates the obligation to warn." VAULT is how you warn the people who will need this when you cannot tell them yourself.
VAULT ships with a demo sandbox — a separate copy pre-loaded with a completed document registry for a fictional family (the Reeds): vital documents, financial accounts, insurance, property, and a quick-reference card, all inside a working encrypted vault.