flash-zk: a server-blind encrypted database for private AI
Most AI databases can read you. This one is designed not to. Sealed envelopes. Blind indexes. The key never lives on the server. RAG and agent memory sit on that — not on a vendor that holds plaintext at query time. We did not ship new crypto in 1.3.1. We shipped the rule, in the open: Default is strong. You can weaken it. It holds if you keep the key. What gets refused next is already written.…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
