I'm Andre Fabre

Project Proposal

The Digital Legacy Vault project is a cloud-hosted, non-custodial, compliance-first, encrypted digital estate platform that stores encrypted instructions and releases them to a nominated executor only after strict verification. It is positioned as an encrypted instruction vault rather than an asset custody platform, with compliance and trust as the core value proposition.

The project addresses a practical and growing challenge; critical personal and estate information is often fragmented across email, cloud apps, devices, and paper records, creating risk and delays for executors. The Phase 1 Minimum Viable Product (MVP) is a proof-of-concept designed to demonstrate a secure and reproducible foundation for digital legacy management, focusing on role-based workflows, secure data handling, and auditable release simulation.

The system is deployed on an Azure Ubuntu virtual machine using Nginx, DNS mapping, and HTTPS to provide a live and secure public endpoint. Security controls include host hardening, restricted network exposure, and fail2ban protection. The application model separates Owner, Executor, and Admin responsibilities so each role operates within defined boundaries. Phase 1 functionality demonstrates onboarding gates, vault encryption workflow, controlled document submission, and administrator-approved read-only release simulation for the executor path.

A scripting component will automate daily backup, log rotation, and integrity checks. The script will generate timestamped reports showing backup success, checksum validation, and recent security events, providing clear evidence of useful automation. This supports demonstrating practical scripting beyond basic lab replication.

Evidence capture is embedded throughout the workflow, including infrastructure state, DNS propagation, certificate validation, endpoint health checks, script execution outputs, and version-controlled GitHub activity across time.

Digital Legacy Vault Phase 1 MVP is a strong fit because it is unique, realistic, and aligned with long-term progression beyond one assessment. It demonstrates end-to-end cloud deployment, secure service exposure, foundational access control, useful automation, and documentation readiness for independent rebuild by another student.