Credential rotation enforcer written in Crystal.Tracks credentials,evaluates compile-time-checked policies,and executes the four-step rotation contract against AWS Secrets Manager,HashiCorpVault,GitHub fine-grained PATs,and local`.env`files.Single binary,liveTUI,bidirectional Telegram bot, tamper-evident audit log,signed compliance evidence export.