Development Roadmap

  • Done (H1 2026): gRPC/Protobuf · live gRPC bidi MessageStream over QUIC (HTTP/2 fallback; intercontinental production validation) · X3DH + Double Ratchet · PQXDH · session recovery · WebRTC voice calls with E2EE signaling · iOS TestFlight beta · censorship-resistant transport · always-on Stealth (sealed sender) for eligible traffic.
  • In progress: Android client (signed APK builds on GitHub; one-to-one chats, media, video notes and calls on the shared core, alpha) · SLIP-39 social recovery (on iOS) · terminal (TUI) client. The macOS Desktop client is on hold.

Decentralization Roadmap

  • Decentralisation, in order: the standalone construct-relay binary (store-and-forward for server-to-server messages, origin signatures verified, two containers on a small VPS) · a DHT for peer discovery and offline storage · direct peer-to-peer delivery with relay fallback · public seed nodes, spam resistance and MLS groups over the decentralised transport. The relay binary exists (its source is not public yet); everything after it is 2027 and later.

Other Planned Work

  • MLS group chats (RFC 9420; primitives exist in the core, no product yet) · first external security audit · Privacy Pass token enforcement (anti-spam on the always-on sealed-sender path) · desktop applications for Windows, Linux · formal verification (Kani).

Current status: alpha. iOS via TestFlight (join the beta), Android as a signed APK on GitHub; no App Store or Google Play release yet. Single trusted server (no federation). Censorship-resistant transport ships and is on by default, but we do not publish where it currently does or does not get through. Not recommended for adversarial threat models until an external audit has been done — there has not been one yet.