Sealed layer
For things that must wait: a letter for a date, notes your keepers open together. An Ice Core is sealed on your own computer and never sits on our shelves.
The sealing tools are not audited yet. Everything runs on your own computer.

What an Ice Core holds
10 short sections, written for the people and the wardens who will act on it. Pointers only: where something is and who knows what to do. Never amounts, never passwords.
- 0Read this first
- 1Who to call
- 2Projects and handover
- 3Accounts (official platform routes only)
- 4Where things are, and who to ask
- 5Wishes and how long they bind
- 6Letters index
- 7What may be public
- 8What I do not want
- 9Rules for wardens
my-core/ # never share this folder COVER.md # public, printable core/COLDLIBRARY.md # for people and wardens core/core.json # machine-checkable letters/001.md sealed/ # what you hand over core.age · letters/001.age · MANIFEST.json
When it opens
There are three ways to open it, and you choose which apply.
On a date
A time capsule. Nothing opens early.
Keepers together
Two of three keepers meet and open it, for a reason you wrote down.
After a long silence
After the silence period (6 months by default) with reminders 30 days before, two keepers confirm, then a 28-day veto window. One check-in from you cancels it.
Keepers
A keeper holds one share of the key. No single person can open anything.
- Three is a good number: someone technical, someone from your family, someone who lives elsewhere.
- Each keeper agrees first, and may step down at any time.
- A share lives on paper or steel. Never photographed, never sent in a chat app.
- The sealed box is kept somewhere other than the shares: a notary, your own account, or a time-lock.
Tools
Everything runs on your own computer. The sealing tools are not audited yet. A seven-day cooling period comes before the first seal.
- Printed questionnaire, 30 questions
- Inventory interview skill for your own AI
- The coldlibrary command-line tool
- The format, spec v0.1
python3 -m pip install ./cli coldlibrary init my-core coldlibrary validate my-core coldlibrary seal my-core --threshold 2 --shares 3 coldlibrary check-share coldlibrary open sealed --share-file a --share-file b