Local-only, append-only records. Next steps add encryption + sync.
Tip: sync stores ciphertext only. Encrypted import/export requires the same passphrase. (Passphrase is not stored.)