jit encrypts your dev machine's secrets at rest, gated by Touch ID
jit moves secrets from plaintext files (.env, ~/.aws/credentials, .npmrc, shell exports) into a local Touch-ID-gated vault, rewriting files to decoys and injecting real values only into the process that asks. It's a smart answer to AI agents and package installers running with your full permissions. macOS-only (Apple Silicon) and still in development.