From 639f3db3af04c931d86722b370b4d2149541da20 Mon Sep 17 00:00:00 2001
From: leetcrypt <leetcrypt@users.noreply.github.com>
Date: Fri, 17 Jul 2026 23:52:58 -0700
Subject: [PATCH] =?UTF-8?q?docs:=20correct=20hero=20claim=20=E2=80=94=20"n?=
 =?UTF-8?q?o=20plaintext=20at=20rest",=20not=20"no=20trace=20on=20disk"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

gopass writes GPG-encrypted blobs to disk and the backup gate writes sealed
.age bundles; only *decrypted* secrets are RAM-only. Fix the tagline, ASCII
box, banner alt-text, and banner.svg prose to state the defensible claim.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 README.md              | 8 ++++----
 docs/assets/banner.svg | 6 +++---
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 23031d3..69975ff 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,10 @@
 <div align="center">
 
-<img src="docs/assets/banner.svg" alt="Incredigo — guards your credentials in locked memory, leaves no trace on disk" width="760">
+<img src="docs/assets/banner.svg" alt="Incredigo — no plaintext at rest: decrypted secrets in locked memory, GPG-encrypted on disk" width="760">
 
 # Incredigo
 
-**Guards your credentials in locked memory. Leaves no trace on disk.**
+**No plaintext at rest.** Decrypted secrets live only in locked, non-swappable RAM; on disk they're GPG-encrypted in gopass.
 
 *Local-first, encrypted, RAM-only credential custody — shipped as the `incredigo` CLI.*
 
@@ -14,8 +14,8 @@
 +------------------------------------------------------------+
 |    /\      INCREDIGO                                       |
 |   /<>\     in-CRED-i-GO : credentials, in Go               |
-|   \<>/     Guards your credentials in locked memory.       |
-|    \/      Leaves no trace on disk.                        |
+|   \<>/     Decrypted secrets live in locked RAM.           |
+|    \/      No plaintext at rest; encrypted on disk.        |
 +------------------------------------------------------------+
 ```
 
diff --git a/docs/assets/banner.svg b/docs/assets/banner.svg
index 720dedd..c3ca065 100644
--- a/docs/assets/banner.svg
+++ b/docs/assets/banner.svg
@@ -1,4 +1,4 @@
-<svg width="1200" height="360" viewBox="0 0 1200 360" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Incredigo — guards your credentials in locked memory, leaves no trace on disk">
+<svg width="1200" height="360" viewBox="0 0 1200 360" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Incredigo — no plaintext at rest: decrypted secrets in locked memory, GPG-encrypted on disk">
   <defs>
     <linearGradient id="bg" x1="0" y1="0" x2="1200" y2="360" gradientUnits="userSpaceOnUse">
       <stop offset="0" stop-color="#161210"/>
@@ -35,9 +35,9 @@
   <text x="360" y="158" font-family="'JetBrains Mono','Fira Code',ui-monospace,monospace"
         font-size="68" font-weight="700" letter-spacing="3" fill="#8C5E2E"><tspan>in</tspan><tspan fill="url(#word)">CRED</tspan><tspan>i</tspan><tspan fill="url(#word)">GO</tspan></text>
   <text x="362" y="206" font-family="'Inter','DejaVu Sans',sans-serif"
-        font-size="25" font-weight="500" fill="#C9BBB0">Guards your credentials in locked memory.</text>
+        font-size="25" font-weight="500" fill="#C9BBB0">Decrypted secrets live only in locked memory.</text>
   <text x="362" y="240" font-family="'Inter','DejaVu Sans',sans-serif"
-        font-size="25" font-weight="500" fill="#C9BBB0">Leaves no trace on disk.</text>
+        font-size="25" font-weight="500" fill="#C9BBB0">No plaintext at rest — GPG-encrypted on disk.</text>
 
   <!-- guarantee chips -->
   <g font-family="'JetBrains Mono',ui-monospace,monospace" font-size="16" font-weight="600">