# 🔒 Encrypted Radicle Repository

This repository is hosted on the [Radicle](https://radicle.xyz) P2P network and encrypted at rest using **git-crypt**. 

To the outside world (and public seed nodes), this repository looks like random binary data. To work on it, you must possess the authorized decryption key stored in our 1Password Vault.

## 🛠 Prerequisites

Before unlocking, ensure you have the necessary tools installed:

1.  **Radicle CLI** (`rad`) - To clone and sync the repo.
2.  **git-crypt** - To handle encryption.
    ```bash
    brew install git-crypt
    ```
3.  **1Password CLI** (`op`) - To securely fetch the key.
    ```bash
    brew install 1password-cli
    op signin
    ```

## 🔓 How to Decrypt (One-Step)

We use the 1Password CLI to fetch the key, unlock the repo, and immediately delete the key file from the disk.

Run this command in the root of the repository:

```bash
op read --out-file key.tmp "op://e23bsp4nrc2avonmzv3ey3axwa/hf5n575245bdo2cczcp6n3tbge/[FILENAME].key" && git-crypt unlock key.tmp && rm key.tmp


### Step 3: Final Check
Before you commit this README, verify your `.gitattributes` looks like this to ensure the instructions stay visible:

```text
# Encrypt everything by default
* filter=git-crypt diff=git-crypt

# NEVER encrypt these files (so we can read instructions)
.gitattributes !filter !diff
README.md !filter !diff
.gitignore !filter !diff