Persisted snapshots and exported blobs can be sealed with AES-256-GCM (passphrase stretched via PBKDF2-SHA256). Covers: encrypted save/load, wrong passphrase rejection, missing passphrase rejection, and encrypted export/import. Runs on CPU fallback (WASM-SIMD) if WebGPU is unavailable.
ready.