Satchel

Personal build · Vol. 01

A quiet home for everything you'd rather not forget.

Satchel is a personal notebook with two rooms. One is open, searchable, and welcomes AI. The other is sealed — your credentials, your recovery phrases, your keys. They live in the same shell but never in the same room.

See how it's laid out

The two wings

One shell, two rooms — with different rules.

Knowledge Wing

Open · Searchable · AI-friendly

Notes, snippets, links, templates — anything worth keeping. Tagged, full-text indexed, and available to the AI layer when you turn it on.

  • Markdown for thought, syntax-highlighted code for the notebook
  • Full-text across title, body and tags
  • Semantic search and chat-with-vault (v3)

Secrets Wing

Sealed · Isolated · Never AI

A separate master password derives the key at unlock. It never leaves memory. AI never enters this room — not by policy, by architecture.

  • AWS_ACCESS_KEY●●●●●
  • STRIPE_LIVE_SK●●●●●
  • OPENAI_API_KEY●●●●●
  • GMAIL_RECOVERY●●●●●

Roadmap

Shipped in small editions.

Built for one user — me. New capability lands only when the last edition earns its keep.

  1. v1In build

    Core Vault

    Auth, both wings, encrypted storage, full-text search. Usable from day one.

    Edition · 01

  2. v2Queued

    Tasks & Pomodoro

    Linked tasks and focus sessions, so the vault fuels the actual work of the day.

    Edition · 02

  3. v3Sealed

    AI Layer

    Auto-tagging, semantic search, RAG chat — over the Knowledge wing only.

    Edition · 03

Security posture

The AI never touches your secrets.

Not by policy — by architecture. The Secrets wing lives outside every embedding, every index, every retrieval path. A design decision worth being able to explain.

  • EncryptionAES-256-GCM · per-record IV & auth tag
  • Key derivationscrypt(masterPassword, vaultKeySalt)
  • Key storageIn memory only — never persisted, never sent
  • RevealExplicit click · auto-clears in ~15s
  • Auto-lockDiscards key after N minutes of idle
  • Search indexKnowledge wing only — secrets excluded
  • AI contextKnowledge wing only — secrets excluded