A modern Git based age-encrypted secrets manager for teams
Temporary decryption with ctg run deletes plaintext after command, unlike sops or git-crypt.
Git-native secrets-as-code workflow layer.
Adds schema validation and drift detection to SOPS without replacing the encryption engine.
DevOps engineers and platform teams managing encrypted secrets in Git
SOPS · git-crypt · Doppler
Temporary decryption with ctg run deletes plaintext after command, unlike sops or git-crypt.
Shadow history for git-excluded files solves the 'lost local notes' problem.
BMAD architecture repurposed for delivery management with audit-ready markdown outputs.
Encrypted .env replacement, but pass and sops already cover this.
Jira + Confluence in one tool, but lacks proof it's actually better.
File-based agent communication via MISSION_CONTROL.md is elegantly simple.