Capture encrypted notes, post once to your cross-room Wall, co-edit SealedBox collaborative documents, and sync Merkle-DAG rooms over direct P2P UDP WebRTC RTCDataChannel—backed by your cluster’s always-on Broker appliance.
Instant quick-capture bar, color-coded pinned cards, instant local search, and cryptographic stream grants under the hood.
Write once to derive_miniapp_namespace(pub, "wall", "main"). A signed StreamGrant is automatically distributed to every room you join so peers across all your rooms can read your Wall card without duplicate writes.
Co-author notes, checklists, and plans with specific peers. The 32-byte document key is encrypted via Curve25519 SealedBox exclusively to authorized collaborators’ verified device subkeys.
Append-only encrypted room streams keyed by (namespace_id, delta_hash) with automatic offline outbox rebasing across concurrent remote snapshot compactions.
No 24-word paper seed phrases and no permanently stored Master Private Key. Your root Ed25519 seed is split into three GF(256) shares across your Broker node, Argon2id ciphertext, and an offline recovery card.
Strict separation between public 24-hour routing envelopes, blind ciphertext storage, and client-side decryption keys.
| Component | Module / Endpoint | Visibility | What It Holds |
|---|---|---|---|
| Switchboard (DHT) | net/switchboard.py · /grid & /peering |
Public / Peered | 24-hour HeartbeatEnvelope routing records (master_pubkey, device subkeys, endpoints) and blind 0x02 SIGNAL forwarding. Never stores user data or social graphs. |
| BrokerNode | net/broker.py · core/vault.py |
Private Cluster (Invite-Only) | BlindVault ciphertext only: encrypted room_deltas, convergent content_blobs, Shamir share_1, and room_policies over direct P2P UDP WebRTC RTCDataChannel (with Switchboard relay fallback). |
| ClientNode / PWA | net/client.py · /app/ |
Personal Device | Operational device signing subkey, local encrypted vault cache, and the 32-byte symmetric keys (room_key / StreamGrant) to decrypt your stream cards. |
