A credential broker built on Vault: zero-knowledge by policy, vendor-neutral by design, and boring by choice. One codebase runs as pooled multi-tenant SaaS or siloed single-tenant from the same binary. The zero-knowledge enforcement and proof have their own diagram; this one is the system structure.