Vault, or moment-of-verification?
V1 framed Nox+ as a document vault: upload, store, retrieve. V2 added transparency panels showing who'd accessed each file. Storage alone didn't address the trust anxiety; transparency panels added cognitive load to a moment that should feel automatic. I reorganized around moments of verification: the home surfaces what's being asked for, with security signals visible at the moment of share. Storage moved to a secondary surface.
Lost a clean "manage everything from one screen" hierarchy. Accepted because the research described identity as reactive, not planned.