Honest current state.
We would rather show you what is real than what looks impressive. Four categories: shipped, in flight, designed but not yet built, and to be decided.
Shipped
Working and in the codebase. Not vaporware.
| Status | Item | Description |
|---|---|---|
| Shipped | MCP memory server | Local-first persistent memory for AI coding agents. Runs as an MCP server on your device. Stores facts, decisions, tasks, and references across sessions and agent vendors. |
| Shipped | Coordinator + mesh control plane | FastAPI coordinator handling peer attestation, signaling, mesh enrollment, and blinded inference dispatch. Privacy invariants enforced at the schema level and tested in CI. |
| Shipped | WireGuard mesh sidecar (Go) | Go sidecar embedding userspace WireGuard. STUN endpoint discovery, UDP hole-punch, DERP relay fallback for symmetric NAT. Cross-network smoke tested on a 4-machine heterogeneous fleet (Mac arm64, Linux x86_64, Windows x86_64). |
| Shipped | Electron desktop app + React frontend (Hearth) | Polished local app: chat, memory browser, agent observability dashboard, mesh management. Ships with the Python inference sidecar and the mesh sidecar embedded. |
| Shipped | Blinded inference dispatch | Coordinator-side dispatch strips member_id before forwarding jobs to contributor peers. Enforced by schema — the message type has no identity field — and by a privacy lint in CI. |
| Shipped | DERP relay (cooperative-operated) | Single-region relay on Fly.io. Implements the DERP wire format. JWT-authenticated. The relay sees encrypted bytes only — no plaintext, no member identity. |
In flight
Active work. These are the current blockers for public launch.
| Status | Item | Description |
|---|---|---|
| In flight | NLnet NGI Zero Commons grant application | Application submitted before the May 23 internal target (June 1 hard deadline). Funds: external security audit of the mesh protocol, 12 months of DERP relay hosting, and signed cross-platform installers. |
| In flight | Single-binary distribution (Launch B) | PyInstaller bundling the Python sidecar + electron-updater auto-update infrastructure + signed installers for Mac (arm64 + x86_64), Windows (x86_64), Linux (x86_64 + arm64). This is the launch blocker — no public membership until binary distribution is clean. |
| In flight | Credit ledger | Per-member accounting of inference tokens served and consumed. Feeds two downstream systems: member-share-class benefits (priority routing, beta access) and the contributor equity program. |
Designed — not yet shipping
The architecture and approach are settled. Engineering has not started or is not the current priority.
| Status | Item | Description |
|---|---|---|
| Designed | PBC incorporation | Delaware PBC charter with anti-tokenization, no-user-data-sale, no-SPAC, and supermajority-required-to-change clauses. Member-share class structure. Requires a startup attorney — legal workstream in progress. |
| Designed | Member authentication + member-share class | Member sign-up flow, annual membership fee, member-share issuance. One member, one vote on model curation, roadmap, and bylaw changes. Target: v0.5. |
| Designed | Contributor equity program | Stock options for active contributors, vested quarterly over 12 months, formula-driven (credits earned / CREDITS_PER_OPTION). Rule 701 exemption. Identity-tied — no anonymous wallet grants. Target: v0.5 or v1.0. |
| Designed | Multi-region DERP | Second relay region to eliminate the single-region SPOF for DERP-heavy users (T-Mobile Home Internet, Starlink, cellular). Post-launch, once cooperative growth warrants. |
| Designed | External security audit | Commissioned review of the mesh protocol + DERP implementation + privacy invariants by a qualified external firm with WireGuard/P2P experience. Funded by the NLnet grant if awarded. |
To be decided
On the map. Not yet designed in detail. Dates are genuinely unknown.
| Status | Item | Description |
|---|---|---|
| To be decided | Public membership opens | Date TBD. Blocked on: signed binary distribution, PBC incorporation, member-auth infrastructure, and the equity paperwork stack. We will not open membership before these are in place. |
| To be decided | Cross-household compute (Phase G cooperative network) | Inference requests routed not just within a household mesh but across the full cooperative membership. Requires member-auth and ACL infrastructure first. This is the core institutional promise — shared compute at cooperative scale. |
On dates: we have an internal submission target of May 23 for the NLnet grant and a hard deadline of June 1. Beyond that, everything else on the designed and TBD list has no public commitment date. We will publish dates when we have confidence in them.
On the launch blocker: public membership opens after signed binary distribution, PBC incorporation, and member-auth are in place. We are not opening membership before those are ready.
On what we do not know yet: the grant outcome, the pace of the legal workstream, how fast the installer pipeline moves. We will update this page when things change.
Read the full vision and the values behind it.
Manifesto