Solution: AES-256. OS-level default + VeraCrypt guide for paranoid clients. Hardware key to unlock.
v3 2026-04-05 Q Mapped to whitepaper sections
v2 2026-04-05 Q Imported SPEC-017 from model_specifications_v2.html
v1 2026-04-05 Q Created spec: SPEC-017: At-Rest Encryption