M1 — the identity and vault boundary.
Two vaults: your private one, and the shared one.
—
These are resolved by the server from your session. No request ever names a vault.
No notes yet.