What it does
When someone enters a wrong passcode, Kryptis stores the attempt: when it happened and which code was tried. With camera access allowed, it also captures a photo from the front camera at that moment. The log lives inside the vault, and each attempt opens full screen.
Why the code matters
Seeing what was typed tells you something a plain counter cannot. A guess of your birthday is a different problem from a random stab.
Where it sits
Intruder Alerts is the third piece of the lock story, after the Decoy Vault and Self-Destruct Mode. The decoy is for when you have to open the app. Self-destruct is for when you must not. Intruder Alerts is for when it happens while you are not there.
