Card/Key/Totp = CLI-only parity via shared item-build module; Document adds org attachment storage + a relicario-server hook change that grant-scopes attachment paths (closing the Unrestricted gap). Secrets via interactive prompts + --*-stdin escape hatches. Four suggested dev streams (A foundation, B Card/Key/Totp, C Document+attachments, D hook). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01L5JvzEse4xUxLZKhofyeCD