| Clients | ||
|---|---|---|
| Slint (Rust) | winit + femtovg, wgpu 3D — desktop, mobile | desktop mobile |
| Audit-trace core | local, headless, CI-provable | live |
| Apps & local seat | ||
| BYOK seat | quorum serve agent fleet; agent.creds client-side | live |
| MCP | Model Context Protocol — inbound tool/agent bridge | live |
| JMAP app model | apps on public IETF schema + PageRank discovery | planned |
| App economy | in-enclave, per-jurisdiction + revenue-share | planned |
| Data & transport | ||
| Stalwart | JMAP + SMTP mail substrate | in progress |
| JMAP-over-:443 | encrypted mailboxes, TEE-bound | planned |
| Logos Delivery | ex-Waku; libp2p + RLN node federation (NATS stays the bus) | planned |
| Identity & anti-sybil | ||
| Keypair auth | signed token redeem + WebAuthn passkeys | live |
| Multipass | on-chain identity / agent registration (Solidity) | designed |
| Radicle | delegate-signed provenance key-source | planned |
| ZK passport · eIDAS 2.0 · ZK-DKIM | verifiable EU identity & citizen sharding | planned |
| ISO/IEC 27565:2026 | ZKP-privacy compliance | planned |
| Deliberation — Mixture of Models | ||
| MoM | multi-provider models → quadratic-vote consensus; quorum-rs / nsed-orchestrator | live benchmarks |
| patch-deliberation | git-native, content-addressed hunks, ephemeral worktrees | live |
| CompositionEngine | git 3-way (git2 / gitoxide) · libpijul second engine | git pijul |
| Comms / wire | ||
| quorum-rs | multi-agent SDK over NATS; nkey invite/token auth, seed never leaves the box | live |
| Root of trust · TEE · crypto | ||
| Signing | Ed25519 · secp256k1 · ML-DSA-65 (post-quantum) · Poseidon | live |
| Encryption | AES-256-GCM at rest / BYOK; ECDH + Shamir E2E | at-rest E2E |
| PQE | crypto-agile hot-swap to PQ KEM + signatures (scheme TBD) | planned |
| Groth16 | ZK prover — SLA / settlement proofs | prototyped |
| HSM attestation | M-of-N cross-manufacturer (near.ai / Phala first) | planned |
| MPC / TSS | dkls23-class threshold key custody | planned |
| Enclave memory | DDR5 ECC + tamper-mesh, power-loss key-lock | planned |
| Confidential RAM | SEV-SNP / TDX (hosted TEE path) | planned |
| Hardware — Peeramid Enclave | ||
| Silicon | RK3582 · Ryzen 7 8845HS · Ryzen AI 9 HX 370 · EPYC 9124 · RTX PRO 6000 Blackwell | planned |
| MistOS | NixOS attested enclave OS, reproducible builds | planned |
The engine runs today; the hardware and the sovereignty substrate around it are planned. Same split on the roadmap.