Function open_sealed 

pub fn open_sealed(
    recipient_secret: &[u8; 32],
    sealed: &[u8],
    aad: &[u8],
) -> Result<Vec<u8>, SanctuaryAuditError>

Open a sealed box produced by seal_to. Requires the recipient secret; the public key alone cannot open it (that is the whole point — the decoy session writes but cannot read).