Vault

Confidential clean-room: share an encrypted container as scoped, revocable, audited query access — counterparties get answers, not the bytes. Every access is logged tamper-evidently.