init - cred

## Keyboard shortcuts

Press `←` or `→` to navigate between chapters

Press `S` or `/` to search in the book

Press `?` to show this help

Press `Esc` to hide this help

# init

Initialize a cred project.

## Usage

Initialize a new cred project in the current directory:

    cred init

This creates:

    .cred/
    ├── project.toml    # Project configuration
    └── vault.enc       # Encrypted secrets vault

Run this once per project, typically at the repository root.

## What Happens

1. Creates the `.cred/` directory
2. Generates a random 32-byte encryption key
3. Stores the key in your OS credential store (Keychain, GNOME Keyring, etc.)
4. Creates an empty encrypted vault
5. Adds `.cred/` to `.gitignore`

## Important Notes

- cred is single-machine only — the vault and encryption key stay on your dev machine
- Use `cred push` to deploy secrets to platforms like GitHub Actions
- Your CI/CD reads secrets from the target platform directly, not from cred

See Security Model for more details.