Product overview

Thalix Vault is a secure remote home for organizational files. It combines private file storage with controlled metadata, immutable version history, access control, discovery, and an append-only record of sensitive activity. The MVP is operated through one complete interface: the tv CLI. A minimal website provides product information and account login, but file and administration workflows remain CLI-first. For definitions of key concepts, see Glossary.

Who it serves

• Global administrators bootstrap and operate the single organization.
• Administrators manage users, groups, Root Folders, metadata definitions, and audit access.
• Users upload, find, inspect, download, version, classify, archive, restore, and share files within their permissions.
• AI coding agents may use a locally installed Thalix Vault skill to translate user intent into supported tv commands. The skill uses the human user's existing session and cannot expand permissions.

Product principles

1. CLI-first: every MVP workflow works through tv.
2. Secure by default: storage is private and access is denied unless allowed.
3. Controlled metadata: consistency-sensitive fields use explicit records and validation.
4. Immutable history: content versions and audit events are not edited in place.
5. Narrow authorization: MVP policies cover file and Root Folder scope, not arbitrary rules.
6. Single organization: tenant switching and cross-organization sharing are excluded.

Core user journey

1. Sign in with tv login.
2. Select an existing Root Folder and valid metadata.
3. Upload a file and receive a stable file ID plus version number.
4. Find or inspect the file without downloading its contents.
5. Download the current or a historical version with checksum verification.
6. Add immutable versions, revise metadata, or manage access where authorized.
7. Investigate sensitive activity through correlated audit events.

Read MVP scope for the exact release boundary and Architecture overview for the implemented system design; Current state lists what remains planned rather than shipped.