# Oryseal

> Browser-local file encryption and decryption with a portable `.oryseal` capsule and a separately stored decryption key.

Oryseal exposes three file workflows: encrypt a local file, decrypt a matching capsule, and inspect the capsule's public structure. File bytes and decryption keys stay inside the active browser workflow. There is no account system, upload API, remote cryptography endpoint, or hosted key recovery service.

## Product

- [Product overview](https://seal.orylin.link/agent/overview.md): Purpose, operating model, and route directory.
- [File workflows](https://seal.orylin.link/agent/workflows.md): Encrypt, decrypt, and verify steps.
- [Help](https://seal.orylin.link/agent/help.md): Key handling, recovery, and troubleshooting.

## Technical reference

- [Security model](https://seal.orylin.link/agent/security.md): Browser boundary, current protection profiles, and limitations.
- [Capsule format](https://seal.orylin.link/agent/format.md): Public format structure and validation order.
- [Build identity](https://seal.orylin.link/agent/build.md): Source identity and asset manifest model.

## Policies

- [Privacy](https://seal.orylin.link/agent/privacy.md): Local data handling and browser preferences.
- [Terms](https://seal.orylin.link/agent/legal.md): Operating responsibilities and capability limits.
- [Accessibility](https://seal.orylin.link/agent/accessibility.md): Keyboard, motion, contrast, and responsive behavior.

## Optional

- [Extended reference](https://seal.orylin.link/llms-full.txt): One-file product and technical reference.
- [Agent surface status](https://seal.orylin.link/ai.txt): Machine-readable entry points and non-applicable service protocols.