The Keeper
Root-of-trust ignition. A threshold of custodians is required.
UNSEALED — the Keeper is serving.
Your key part is forwarded once to the sealed store and never stored, logged, or echoed — not even by your browser. Submit yours, then hand off to the next custodian.