Documents Documents (private vault) Structured JSON documents stored in the caller’s private vault. Each document is encrypted with a vault-scoped DEK; the vault must be unsealed for all document operations. Queries: list, get, versions Mutations: create, update, delete, validate