8.3 Encrypted Bundle Teleport, Shroud, Bridge & Vault

chinwag teleport --bundle HEAD --seal-hpke

✅ Available Now (v0.1.0 · CHWG-PUB-109): chinwag teleport, chinwag shroud, and chinwag bridge (including .cwcard.png Mode A/B receipt cards) are shipped in v0.1.0. The optional chinwag ext install vault (PhantomVault / Friday Syndicate Cup bridge · CHWG-PUB-114) is ⏳ Coming Soon (v0.2.0) — track live progress via /api/reality-matrix and the Chinwag Public Roadmap.

These commands and reference extensions combine chinwag-mesh's K1 + K2 Post-Quantum Hybrid E2EE envelope with the 3-Repo Chinwag Cryptographic Time Machine.

1. chinwag teleport (1-Click Ticket Teleportation & Encrypted Working-Tree Handoff)

Need to hand off an in-flight Executable Ticket (ENG-402 or #142) between an agent (Builder or Reflex-1) and a human engineer, or move an uncommitted Shadow jj workspace across machines without pushing a dirty WIP branch to GitHub?

chinwag teleport performs a <300 ms 1-Click Ticket Teleportation (250 Credits · $1.60 on Growth Pack · $1.25 on Org Volume; 0 Credits on local loopback) backed by <org>/chinwag-tasks.git in the Chinwag Encrypted Artifact Store, dropping the recipient into the exact Git worktree (project_worktree_oid), warm Shadow-KV mental state (refs/chinwag/tasks/ENG-402/shadow-kv), and deterministic flight tape at Step N with a scoped 10-minute art_v1_ token:

# 1-Click Ticket Teleportation (<300ms): hand off Linear ticket ENG-402 at Step 8
# with exact project_worktree_oid, warm Shadow-KV, and a 10-minute art_v1_ token:
chinwag teleport ENG-402 --at-step 8

# Or beam an active Shadow jj workspace directly from Machine A to Machine B:
chinwag teleport send --task TASK-204 --to my-macbook-pro
chinwag teleport receive --task TASK-204

# Optional: Package as a proxy-resilient .cwcard.png visual receipt card
chinwag teleport send --task TASK-204 --as-cwcard --out task-204.cwcard.png

2. chinwag shroud (Instant Cryptographic Revocation & readOnly: true Freeze)

If a developer laptop is lost or an anomalous agent loop is detected, chinwag shroud executes an immediate, dual-signed (K1 + K2) cryptographic lockdown across both chinwag-mesh and the Chinwag Encrypted Artifact Store:

# Immediately revoke active room tickets and freeze org Artifacts repositories to readOnly: true
chinwag-mesh shroud --room "#eng" --reason "incident-key-rotation"

What chinwag shroud Enforces in <50 ms

1. Instant readOnly: true Freeze Across the Chinwag Encrypted Artifact Store: Locks <org>/chinwag-bus.git, <org>/<project>.git, and <org>/chinwag-config.git (plus all active repo.fork() sandboxes) to readOnly: true and blocks all ephemeral art_v1_<TOKEN> (repo.createToken) minting.
2. Roster Epoch Advance & Ticket Invalidation: Increments roster_epoch so all previously issued TransferTicketV1 leases fail closed with EXIT_K2_REQUIRED = 78.

3. chinwag bridge (Adaptive <= 310ms 5-Rung Transport & Stego-.png Mode A/B Profile Persistence)

Probes your corporate proxy or firewall environment within <= 310ms (iroh QUIC P2P, WSS :443, JA4 XHTTP + Stego-.png Mode A AncillaryCwcd vs. Mode B IdatPixelPlane RGBA scanlines, Worker Backbone Hop, or Git Sync) and persists the winning profile at refs/chinwag/ladder-profiles/<net_hash> (and .cwcard.png receipts at refs/chinwag/stego-cards/<msg_id>) in <org>/chinwag-bus.git so subsequent calls jump straight to the winning transport on Attempt #1 (0ms probe overhead):

chinwag-mesh bridge --env zscaler

4. chinwag ext install vault (PhantomVault Tournament Bridge)

The vault extension connects teams practicing The Chinwag Way to the optional Friday Syndicate Cup and PhantomVault scrimmage arena while enforcing the 20-Byte Zero-Knowledge Counter Firewall (WorkToPlayCounterBridgeV1):

chinwag ext install vault
chinwag vault sync-chips --verify-20b-wall

• Zero Source-Tree Read Access: Enforced by OS kernel sandboxing (macOS Seatbelt / Linux Landlock ABI v4).
• Strict 20-Byte Payload Verification: Only the signed 20-byte WorkToPlayCounterBridgeV1 summary counter (epoch_week_u16, settled_chips_u32, survival_bps_u16, clean_handoffs_u16, tribunals_passed_u16, blind_team_tag_u64) + 64-byte Ed25519 signature can cross the socket boundary.

• Next: CLI Reference: chinwag tasks & chinwag task
• Ready to equip your team with the full Chinwag toolkit? Reserve Your Organization Credit Pack →