Connect once.Then it runs on its own.

The vendor grants read access to the repository. Nothing else, and nothing to upload by hand.

Every day — or on every release tag — 42escrow takes a copy, bundles it and encrypts it with its own data key.

Each version gets a SHA-256 and an entry in an append-only log that hashes the entry before it.

If an agreed trigger event occurs, evidence is reviewed and the release approved. Only then does the licensee receive the code.