ForgeStudio Securo

ForgeStudio Securo is the initial Windows-first Visual Studio build for STG / StaticTechGroup secure vault storage.

What this build includes

• Visual Studio solution: ForgeStudio.Securo.sln
• WPF Windows app with ForgeStudio dark UI
• Offline vault creation and unlock
• Drag-and-drop encrypted file import
• Encrypted file export
• Encrypted blob delete
• Password + optional keyfile + optional Windows user device binding
• AES-256-GCM authenticated encryption
• Argon2id password-based key derivation
• Encrypted vault metadata and encrypted file blobs
• Release/debug security warnings in UI
• Unit tests for crypto and vault round trip

Open in Visual Studio

1. Install Visual Studio 2022 with .NET desktop development.
2. Open ForgeStudio.Securo.sln.
3. Restore NuGet packages.
4. Build Release | Any CPU.
5. Run ForgeStudio.Securo.App.

Important security notes

This build is designed as a strong initial vault application, not a kernel-level disk encryption driver. It creates an encrypted vault container folder on selected media and manages files through the Securo app.

Do not unlock real sensitive vaults while debugging. Debugger attachment and Debug builds are explicitly warned in the UI.

Current safety boundaries

• Securo does not format disks.
• Securo does not install kernel filesystem drivers.
• Securo does not expose a mounted drive letter yet.
• Exported files are plaintext outside the vault.
• A compromised host can still steal data after vault unlock.

Recommended first validation in Visual Studio

• Build solution in Release.
• Run tests.
• Create a test vault in an empty folder on a USB drive.
• Import a test file.
• Lock and reopen the app.
• Unlock the vault.
• Export the file and compare contents.
• Try wrong password and verify unlock fails.
• Try missing keyfile and verify unlock fails.

Patch 5 UI Flow Update

This package adds a more dynamic ForgeStudio Securo workspace:

• Resizable main layout with a splitter between setup and vault workspace.
• Loading overlay for long-running create/unlock/import/export/view operations.
• Tabbed workspace foundation for vault sessions.
• Icon-styled encrypted file list.
• In-app preview for text, markdown, logs, JSON, XML, CSV, YAML, and Windows-supported image codecs.
• Temp View for other file types using the Windows default app.
• Lock Vault clears password, keyfile path, vault path, vault name, previews, file list, temporary viewer paths, and active session keys best-effort.

Fixed6 Build Patch

This patch fixes the remaining TabControl WPF/WinForms ambiguity introduced by the tabbed vault workspace foundation. Use this package over Fixed5.