Features

This section covers cross-cutting capabilities that span multiple systems. They aren't independent deployable units (those are apps) and they aren't single architectural components (those are systems) — they're features users care about whose implementation reaches across both.

Page	Spans
Auto-unseal	Seal, server config, KMS wrappers
Namespaces	Core, identity, policy, mounts, replication
Plugin system	Plugin catalog, SDK, Auth methods, Secret engines
Login MFA	Auth methods, identity, request handling
Transit secrets engine	Secret engines, keysutil, BYOK / managed keys
PKI secrets engine	Secret engines, CRL, ACME, OCSP
KV (v1 and v2)	Secret engines, versioning
OIDC provider	Identity store, http handler
Audit pipeline	Audit broker, request handling, eventlogger
Activity / client counting	Identity, audit, billing