Introduction
What is Basil?
How it works
Backends & custody
Threat model
How it compares
Getting Started
Quickstart
Installation
First run: basil config init
Make it your own
Migrating from sops-nix to Basil
Configuration
Configuration overview
The catalog (keys)
The policy (authorization)
Backends & capabilities
OpenBao & Vault
AWS KMS
Google Cloud KMS
1Password
Capability policy & reconcile
Unlock & the sealed bundle
Approvals & change control
Limits & resource controls
JWKS HTTP surface
CLI Reference
CLI overview
Command reference
Client Libraries
Client libraries overview
Rust client
Streaming encryption
Go client
Other languages
NATS integration
Integration patterns
Sealed invocations
NATS bridge
Operations
Crypto: keys & algorithms
Rotating keys
Importing (BYOK) keys & sets
Revocation
Audit logs
Hot reload & admin reload
Health & readiness probes
Policy explain / dry-run
Doctor (preflight checks)
Automated boot unlock
Examples
Examples overview
db-keystore backend
Troubleshooting
Error & status code reference
Incident runbook
Reference
Feature matrix
Glossary
RFC compatibility
NATS JWT reference
License
CLI Reference
Pages:
CLI overview
Command reference