@meta
  v: 1
  route: /guide/
  generated: 2026-11-05T04:06:43Z
  ttl: 1d
@intent
  purpose: "The Titanwarden guide: what it is, how it differs from a password manager, how secrets are protected, install, agents, console, questions, limits, exit codes"
  audience: engineer, operator, ai-agent
  capability: learn, install, troubleshoot
@state
  product: Titanwarden
  page: Titanwarden guide
  page_sections[9]:
    - Titanwarden in one minute
    - What makes it different from a password manager
    - How a secret is protected
    - Install it on your own machine
    - Give an agent a credential
    - The web console
    - The questions people ask
    - Honest limits today
    - When something fails
  anchors[9]:
    - /guide/#one-minute
    - /guide/#different
    - /guide/#protection
    - /guide/#install
    - /guide/#agents
    - /guide/#console
    - /guide/#questions
    - /guide/#limits
    - /guide/#failures
  exit_codes[6]{code,meaning}:
    64,bad arguments or frame
    69,broker unreachable
    70,integrity or audit failure
    75,"sealed, frozen or busy"
    77,"refused: auth, scope, policy or identity"
    78,no identity: no token file for this caller
  crypto[4]: AES-256-GCM per value, Argon2id passphrase slot, HKDF-SHA256 subkeys, memory-only master key
  states[4]: Sealed, Unsealed, Frozen, Lockdown
@actions
  - id: read_install
    method: GET
    href: /guide/#install
  - id: read_agents
    method: GET
    href: /guide/#agents
  - id: back_to_front_page
    method: GET
    href: /
@context
  > Titanwarden is a secret broker for machines where AI agents work: use, never see. How it differs from a password manager, how secrets are protected, how to install it, and what is planned.
  > The agent protocol has no operation that returns plaintext; the shipped web console is read-only.
@nav
  self: /guide.agent
  parents: [/.agent]
  peers: []