Reactive by DefaultSubscribe to config changes automatically. No manual IOptionsMonitor wiring. IReactiveConfig<T> updates in real time.
Zero CeremonyDefine a class, add a rule, inject it. No Configure<T>() calls, no IOptions<T> wrappers. Just your POCO.
Memory-Safe SecretsSecret<T> with automatic zeroization. Pre-encrypted envelopes decrypted only on Open(). RSA-OAEP + AES-256-GCM.
Feature Flags & EntitlementsStrongly-typed flags with expiry health, entitlements for plan enforcement. Source-generated descriptors.
Atomic UpdatesAll config types update together or not at all. IReactiveConfig<(T1, T2)> guarantees consistent snapshots — no mix of old and new values.
Explicit LayeringRules execute in order, last write wins. File, environment, command-line, HTTP — layer any source with full control.