Security
Track I · sage
Encryption, Cross-Guard, Modes, Anti-Theft, Cipher Personality. The math under everything.
DevoraX2 is an architecture before it is an app. Every phase below ships only when the previous one is auditable, documented, and quietly proven. I will not move fast. I will not break trust. The dates are honest estimates — not promises I will bend the math to keep.
I will ship slowly, and only when the encryption is ready. I will say no to investors who do not understand the assignment.
I work on five things at once, on purpose. No single track is allowed to outpace the others by too far. An app without security is theatre. Security without community is a black box. The whole moves together — or it does not move at all.
Encryption, Cross-Guard, Modes, Anti-Theft, Cipher Personality. The math under everything.
The messenger itself. Devices, sync, calls, UX, platforms.
Encrypted shared spaces and Bridges to other messengers, without leaving the E2E perimeter.
Open-source release, public audits, governance, transparency reports. The accountability layer.
Each card below is a phase I have committed to publicly. Each phase ships only when the previous one is stable. Hover a card to see its bullets. The road bends because progress is not linear — sometimes the next step is sideways, sometimes a track has to wait.
Public landing, manifesto, security charter, full Cipher Personality catalogue. The architecture, named and on the record — before any line of public code shipped.
Cross-Guard handshake production-grade. Device A and Device B reach parity. Vault v1 ships — encrypted continuous backup, never empty.
Hidden, Decoy, and Panic ship together. SMS-Brick channel goes live. Anti-Theft full timeline operational — freeze, watch, wipe, brick, reissue.
Open beta for the waitlist. First public audit reports published. iOS, Android, Desktop sync — all three from the same encrypted source.
Encrypted voice and video calls. Group calls up to eight participants. Shared media (photos, files) within the same E2E perimeter as text.
Context factors arrive: geofence, behavioral baseline, network fingerprint, movement signature, ambient. Self-evolving profiles enter beta — profile drift every 30 days within Your boundaries.
Encrypted shared spaces — multi-party ratchets, group cryptography, bounded membership. A World is a private room You step into; the door uses Cipher Personality.
Telegram, WhatsApp, Signal — readable inside DevoraX2 without leaving the encrypted perimeter. Secure relays decrypt only on Your device, never on a server I control.
Discord, Slack, Viber bridges. Cross-Worlds search — one query, every space, all encrypted. I do not ask You to give up the rest of the internet to use Ours.
Full open-source release of all clients and the cryptographic core. Independent audit firms publish their reports the same week. I have nothing to hide because the math has nowhere to hide.
Hidden rules library expanded. Per-device evolutionary profiles. AI-managed Metamechanics layer — the algorithm finally gets a brain to recompose Your defense in response to Your environment.
Self-evolving AI-managed profiles within user-set boundaries. Profile drift every 30 days — the lock You lived with last month is not the lock You will live with next.
Support for hardware tokens — YubiKey, Solo, dedicated DevoraX2 Guardian device. For users who want Cross-Guard backed by a separate physical chip, not a phone.
Federated DevoraX2 servers. Self-host option for organisations that need their own relay infrastructure — identical protocol, audited identically, governed locally.
Migration to a fully standardized post-quantum suite as NIST recommendations evolve. Graph-proof of cryptographic continuity — no message in transit becomes readable during the transition.
Full peer-to-peer DevoraX2 — no central servers required. Optional federated relays remain available for users who prefer them. The messenger that needs nothing from me becomes the messenger I wanted to build.
Some things will not be on this map. They will be on the next one. I will not say which. A roadmap that publishes everything is a roadmap that has revealed too much.
Cipher Personality is the layer that gets denser over time. I start with a known catalogue of rules; I end with a living organism whose composition only the algorithm and You can describe. Here is the trajectory.
28 rules across 4 groups. Each user receives a randomized subset at install. Decoy and unlisted categories exist; the assignment is per-install. The math is fixed; Your draw is not.
Geofence, behavioral, movement, and network factors come online. Profile starts adapting to where and how You are — not just what You know and have.
AI-managed Metamechanics. The algorithm composes Your profile dynamically, learns Your environment, suggests evolutions for Cross-Guard approval. The lock pays attention.
Every profile becomes a private organism. It drifts within Your boundaries, learns Your changes, retires factors that no longer fit. You are no longer a key holder. You are a tide the lock listens to.
A roadmap is a public commitment, and I am careful about what I commit to. Here are the things I deliberately keep off the map — not because I will not do them, but because I will not let an external schedule rush my judgement.
Quarters are estimates. Encryption ships when encryption is ready — not when a calendar says so. If a phase slips because an audit caught something, I will say so, in plain language, in the same place You read this roadmap.
Bridges to messengers, yes. "By Q3 I will integrate with Microsoft Teams." No. I do not commit to deals that depend on a third party being in a good mood that quarter.
I will publish on the App Store and Google Play. I will not promise I will not be removed. Platforms have their own politics; I plan for both presence and absence on them.
Cipher Personality v2 uses on-device AI to compose Your defense. I will not ship server-side AI features that read Your messages to "improve recommendations". That direction is not on the map. Ever.
Sign up to the waitlist to follow the road as it unfolds — updates only when something meaningful ships, never marketing for marketing's sake.