Development Roadmap

  • Done (H1 2026): gRPC/Protobuf · live gRPC bidi MessageStream over QUIC (HTTP/2 fallback; intercontinental production validation) · X3DH + Double Ratchet · PQXDH with ML-KEM-768 · session healing · WebRTC voice calls with E2EE signaling · iOS TestFlight beta · censorship-resistant transport · always-on Stealth (sealed sender) for eligible traffic.
  • In progress: macOS Desktop client (iOS-direct crypto path, no public build yet) · Android client (currently Phase 0 — Rust core builds, Kotlin wrapper TBD) · BIP39 / SLIP-39 social recovery · MLS group chats (RFC 9420) · first external security audit · hybrid PQ signatures (ML-DSA-65) — crypto core and server storage / verification implemented, client-side orchestration (identity generation, key rotation) not yet wired into the shared core.

Decentralization Roadmap

  • Decentralisation, in order: the standalone construct-relay binary (store-and-forward for server-to-server messages, origin signatures verified, two containers on a small VPS) · a DHT for peer discovery and offline storage · direct peer-to-peer delivery with relay fallback · public seed nodes, spam resistance and MLS groups over the decentralised transport. The relay binary exists; everything after it is 2027 and later.

Other Planned Work

  • video calls · Privacy Pass token enforcement (anti-spam on the always-on sealed-sender path) · desktop applications for Windows, Linux · formal verification (Kani).

Honest current status: alpha. iOS via TestFlight only (join the beta); no public App Store release yet. macOS Desktop client is in active development, no build available yet. Single trusted server (no federation). Censorship-resistant transport ships and is on by default, but we do not publish where it currently does or does not get through. Not recommended for adversarial threat models until the first external audit completes.