Cloud Vault: Key Rotation & Least-Privilege Access

Encrypting cloud data only helps if the keys guarding it don't live forever. This simulator renders an encrypted vault in 3D: a ring of key fragments spins around a core of orbiting data shards, and every request from the Owner, Analyst and Attacker nodes has to clear two independent checks — does this role have permission at all, and is the key it's holding still the current epoch. Owner and Analyst requests always carry a freshly re-authenticated key, so their access depends purely on role permission; toggle the Analyst's decrypt permission off to see least-privilege access control in action. The Attacker node only gets a key when you deliberately leak one: click "Leak the current key" and it starts firing requests with that snapshot on a loop, succeeding right up until the vault's automatic rotation retires that epoch — watch the exposure window shrink as you tighten the rotation interval.