{ "schema": "daemonet.roadmap.v1", "revision": "2026-07-15.1", "asOf": "2026-07-15", "authority": "1man_product_development_playbook.md", "signed": false, "automaticActivation": false, "currentCommercialTarget": "1Man Verified Access and Hosting", "boundary": "Normal Community and Verified Access are control-plane services with zero shared capacity; future data paths are separate, explicit services.", "truthLabels": { "verification": "Repository behavior exists in whole or in part, but its complete exit gate or external production evidence is open.", "future": "Evidence-gated future work; not a current product claim.", "research": "Design input with unresolved architecture or evidence requirements." }, "phases": [ { "id": "phase-0", "number": 0, "name": "Company and release foundation", "truth": "verification", "dependsOn": [], "services": ["release-foundation"], "unlocks": ["repeatable signed release and recoverable managed operation"], "openGate": "Independent company, legal, production, backup, credential-rotation, and clean-operator evidence." }, { "id": "phase-1", "number": 1, "name": "Daemonet core hardening", "truth": "verification", "dependsOn": ["phase-0"], "services": ["daemonet-core"], "unlocks": ["user-held identity", "profiles", "private DNS", "direct WireGuard", "self-hosting"], "openGate": "Repeat the complete install, revoke, interruption, recovery, upgrade, and rollback proof from supported clean systems." }, { "id": "phase-2", "number": 2, "name": "1Man universal access alpha", "truth": "verification", "dependsOn": ["phase-1"], "services": ["managed-enrollment", "device-cards", "daemonet-home"], "unlocks": ["owner-approved phone, browser, and thin-client enrollment"], "openGate": "Complete supported-device packaging and prove no topology custody or application-data fallback." }, { "id": "phase-3", "number": 3, "name": "Payment and entitlement foundation", "truth": "verification", "dependsOn": ["phase-2"], "services": ["community-entitlement", "prepaid-managed-entitlement", "self-custody-watcher-integration"], "unlocks": ["finite prepaid managed capabilities without making payment an identity"], "openGate": "Run real-wallet payment, expiry, late-settlement, replacement, and recovery canaries under reviewed policy." }, { "id": "phase-4", "number": 4, "name": "Verified names and hosting", "truth": "verification", "dependsOn": ["phase-2", "phase-3"], "services": ["verified-access-and-hosting", "daemongates", "domain-deeds", "explicit-daemon-hub"], "unlocks": ["first sellable loop", "portable verified names", "origin-held HTTPS", "replaceable hosts"], "openGate": "Complete signed/notarized supported-platform execution plus live ACME renewal, self-hosted exit, and independent three-gate production canaries." }, { "id": "phase-5", "number": 5, "name": "Availability and service surgery", "truth": "verification", "dependsOn": ["phase-4"], "services": ["availability", "health-evidence", "blue-green-and-rollback"], "unlocks": ["policy-controlled failover", "drain", "canary", "provider migration"], "openGate": "Repeat the implemented kill, migrate, canary, drain, restore, and rollback ceremonies against independent live origins and retained customer evidence." }, { "id": "phase-6", "number": 6, "name": "Pocket Dimension personal storage", "truth": "verification", "dependsOn": ["phase-4", "phase-5"], "services": ["pocket-dimension", "encrypted-replication", "tested-restore"], "unlocks": ["owner-controlled backup", "recovery", "application storage for later Mail and media"], "openGate": "Run the implemented encrypted archive, replication, repair, gallery, recovery-artifact, and clean-device restore path across supported physical devices under destructive phone, camera, laptop, and peer loss." }, { "id": "phase-7", "number": 7, "name": "Organization and quorum controls", "truth": "verification", "dependsOn": ["phase-5", "phase-6"], "services": ["organization-authority", "quorum-approval", "delayed-recovery"], "unlocks": ["delegated administration", "M-of-N operations", "organization-owned evidence"], "openGate": "Repeat the implemented device-held share, M-of-N, policy succession, delayed recovery, removal, and audit-export ceremonies across independent hardware-backed devices and departure/loss drills." }, { "id": "phase-8", "number": 8, "name": "Institutional and healthcare readiness", "truth": "verification", "dependsOn": ["phase-7"], "services": ["institutional-operations", "compliance-evidence"], "unlocks": ["contracted and independently evidenced institutional operation"], "openGate": "Independent assessment, contracts, operating evidence, continuity, and narrowly scoped production approval agree with the technical boundary." }, { "id": "phase-9", "number": 9, "name": "Daemon Pay and creator/service entitlements", "truth": "verification", "dependsOn": ["phase-3", "phase-4"], "services": ["merchant-entitlements", "daemon-pay", "daemon-pay-provider-sdk", "external-buy-to-wallet", "ephemeral-portals", "creator-stream-chat", "daemon-radio-protocol", "optional-provider-catalog", "optional-receipt-witness"], "unlocks": ["portable third-party rights", "direct Lightning and on-chain merchant settlement", "minimum-disclosure provider authorization", "creator-owned services", "station and media protocols"], "openGate": "Run the implemented receive-only Lightning/on-chain watcher, provider verifier, durable meter/wallet/portal stores, external onramp boundary, portable catalog, complete receipt/report evidence, optional witness/Merkle service, creator chat/tips, portals, and direct Radio authorization through selected real wallets/onramps and independent merchant/provider/artist/listener customer journeys; complete legal/accounting policy and independent security review." }, { "id": "phase-10", "number": 10, "name": "Collective storage and Recovery Key Mesh", "truth": "verification", "dependsOn": ["phase-6", "phase-9"], "services": ["collective-storage", "recovery-key-mesh", "capacity-evidence", "milestone-ledger", "receipt-merkle-anchors"], "unlocks": ["auditable shared encrypted storage", "repair", "evidence-based collective capacity"], "openGate": "Deploy the implemented encrypted erasure placement, authenticated provider transport, durable opaque store, audit, deletion, migration, capacity evidence, and Recovery Key Mesh across independent operators, then externally reproduce reserve, repair, diversity, and destructive-loss results." }, { "id": "phase-11", "number": 11, "name": "Daemonet VPN and the Aethernet", "truth": "verification", "dependsOn": ["phase-5", "phase-9", "phase-10"], "services": ["aethernet", "daemonet-vpn", "bandwidth-dilution", "anonymous-hosting", "resilient-radio-delivery"], "unlocks": ["explicit distributed privacy modes", "shared delivery capacity"], "openGate": "Deploy the implemented nested per-hop relay cells, role-pinned tickets, replay defense, coded windows, Linux kill switch, and address/DNS canary across independent entry/transit/exit operators; then complete router integration, provider settlement, adversary-specific review, and critical-mass measurements." }, { "id": "phase-12", "number": 12, "name": "Location-independent compute and AI", "truth": "verification", "dependsOn": ["phase-5", "phase-6", "phase-7", "phase-9", "phase-10", "phase-11"], "services": ["daemon-compute", "daemon-ai", "workload-placement", "temporary-clusters"], "unlocks": ["trust-classed federated inference", "batch compute", "portable execution environments"], "openGate": "Deploy the implemented authenticated remote worker, encrypted durable idempotency, resumable WASM checkpoint/migration, temporary-cluster, placement, and result-quorum paths across independent providers; then complete attestation, accounting/settlement, incident response, and production AI policy evidence." } ], "applicationTracks": [ { "id": "browser-contained-access", "name": "Browser-contained Daemonet access", "truth": "verification", "dependsOn": ["phase-2", "phase-4"], "laterEnhancements": ["phase-11"], "boundary": "The selected browser-direct mode is a typed ordered WebRTC data channel introduced through encrypted volatile signaling. It is not an OS WireGuard interface, rejects TURN/relay candidates, and carries application bytes only browser-to-customer-origin." }, { "id": "daemon-mail", "name": "Daemon Mail", "truth": "research", "dependsOn": ["phase-4"], "laterEnhancements": ["phase-5", "phase-6", "phase-7"], "boundary": "The public SMTP edge is an explicit application data path that may receive plaintext; 1Man core is not the mailbox or SMTP relay." }, { "id": "daemon-radio", "name": "Daemon Radio", "truth": "verification", "dependsOn": ["phase-9"], "laterEnhancements": ["phase-10", "phase-11"], "boundary": "Strict signed offer, entitlement, media, station, directory, and direct playback-authorization paths exist; artists and stations still own catalogs, rights, audiences, settlement, and streams, and the live end-to-end merchant/player release gate remains open." }, { "id": "collective-unlock-roadmap", "name": "Collective capacity roadmap", "truth": "verification", "dependsOn": ["phase-10"], "laterEnhancements": ["phase-11", "phase-12"], "boundary": "Signed capacity snapshots and milestone-rule formats now exist, but this public release manifest remains unsigned and cannot activate features; live unlocks still require auditable providers, reserves, governance, and release gates." }, { "id": "daemon-pay-receipt-services", "name": "Daemon Pay portable commerce and optional managed services", "truth": "verification", "dependsOn": ["phase-9"], "laterEnhancements": ["phase-10"], "boundary": "Customers pay independent merchants directly and retain portable rights/receipts. Provider authorization, metering, wallet policy, disclosure, portals, creator traffic, and transaction state stay on customer/provider systems. 1Man may publish an optional signed catalog or witness only a co-signed commitment; encrypted recovery is separately selected, public export is disabled by default and non-authoritative, and no catalog/witness/token becomes merchant entitlement authority." } ], "sourceNotes": [ {"path": "daemon-1man-architecture.md", "disposition": "binding-direct-path-interpretation"}, {"path": "daemon-gates-domain-control-evidence.md", "disposition": "domain-design-accepted-mail-design-research"}, {"path": "wasm-daemon-portal-for-anonymous-hosting.md", "disposition": "typed-browser-direct-implemented-arbitrary-web-and-relay-claims-rejected"}, {"path": "daemon-mail.md", "disposition": "application-research"}, {"path": "daemon-radio.md", "disposition": "portable-phase-9-protocol-and-direct-reference-player-implemented-live-delivery-release-gated"}, {"path": "daemonet-vpn.md", "disposition": "phase-11-policy-relay-kill-switch-and-leak-canary-implemented-live-network-release-gated"}, {"path": "bandwidth-dilution.md", "disposition": "encrypted-coded-window-and-nested-relay-runtime-implemented-anonymity-claims-release-gated"}, {"path": "daemonet-1man-interactive-live-roadmap-with-features.md", "disposition": "phase-10-to-12-portable-protocol-provider-and-worker-runtime-implemented-live-federation-release-gated"}, {"path": "daemon-pay-detailed-notes.md", "disposition": "direct-dual-rail-commerce-broad-entitlements-provider-wallet-onramp-reporting-creator-portal-catalog-and-managed-witness-boundaries-implemented-live-integrations-and-public-export-separately-gated"} ] }