Privacy

CredentialKeeper should expose only sanitized credential status on public proof pages. Private evidence files, internal notes, and storage paths should remain private to authorized workspace users.