§ The Apps
One identity. Every app you use today.
Messaging, calls, publishing, governance, your own website, your whole history — all through a single
Guide ID, all on your own node. No accounts to make, no host to pay, and the only number
you have is one you can change whenever you like.
MESSAGING & CALLS
You decide who can reach you.
DMs, voice, and video — peer to peer, permission first.
Your Guide ID is your name, and it is public in everything you post. Your contact code is your number — and it is yours. Hand it to one person at a time and you are private by default. Publish it in an anchor or on your PHEUN Site and anyone can reach you. That is a choice you make, and unmake: change the code and everyone holding the old one is cut off, the way a new number works, except it costs nothing and your name never changes. Every message is sealed end-to-end, then wrapped in a 3-hop post-quantum onion — so even the last relay carries nothing but ciphertext.
The gate runs before your node negotiates anything, which is the part that matters: a call hands your address to whoever it connects with, so refusing after it rings would already be too late. A stranger who read your post gets your name, never your node.
Signal’s PQXDH is post-quantum in one place — the opening handshake — and the ratchet carrying your messages after it is classical. Apple’s PQ3 does rekey post-quantum as a conversation continues, but it is hybrid: classical cryptography alongside, on Apple’s own service, needing an Apple ID. Every PHEUN message, anchor and call setup crosses the network post-quantum with no classical component at all — on an open protocol that asks for no account.
- ML-KEM-1024 + ML-DSA-65 + AES-256-GCM + BLAKE3 — end to end
- Private by default — share your code person to person, or publish it and be openly reachable
- Rotate it whenever you like: the people you keep get the new code on your next message to them, automatically
- No phone number to register, and none to lose — a Guide ID is yours to replace, free, at any time
- No PHEUN server exists to breach, subpoena, or switch off
- Call setup needs no STUN provider — peers answer “what is my address?” for each other, so no Google or Twilio ever sees who is calling. With push off, a call is placed without a single packet leaving the mesh.
- Store-and-forward when a peer is offline
- Optional push for a closed tab — the one moment your browser’s push service (Google, Mozilla, Apple or Microsoft) is involved at all. Payloads stay end-to-end encrypted, but Web Push fixes its own cryptography and it is classical; leave push off and nothing outside the mesh is contacted.
Said plainly — the three places classical cryptography remains. Live call media travels over WebRTC’s standard DTLS-SRTP, whose handshake is classical — browsers give an application no say in it. Recorded call media is therefore not protected against “harvest now, decrypt later”, while your messages, anchors and call signalling are; per-frame post-quantum encryption is a build item, not a limit of the design. The hop from your browser to your own node is ordinary HTTPS on a classical RSA certificate, because no browser trusts a post-quantum certificate yet — under one user, one node, that hop is usually a machine talking to itself, and only crosses a wire when you open your node from a second device on your own network. And if you enable push notifications, the Web Push standard fixes its own cryptography — P-256 and AES-128, both classical. Your browser’s push service still cannot read the payload, but it is not harvest-proof, and a message notification carries a short preview of the text. Push is off until you turn it on.
GOVERNANCE
Constitution & Curriculum.
Rules the citizens write — and can change.
The Digital Constitution and the Digital Curriculum run the same proposal / vote / consensus pipeline, amended one line at a time at a 75% threshold. A document is opened once and then only ever grows — propose a new line, or a new version of an existing one.
- No admins, no moderators, no veto
- Every vote is an anchor, tallied on the mesh
- One shared document, identical on every node on Earth
PHEUN SITES
Your website, no host.
A site with no registrar and no server.
Publish a full mesh-native website — signed by your Guide ID and distributed across the mesh as a payload. No DNS, no hosting bill, no takedown. Pick a template and a theme, and share it as a PHEUN Link.
- Static, immutable, cryptographically yours
- Fourteen templates, ten themes out of the box
- Rendered inline in any feed as a site card
AVATARS
Your face, in the anchor.
A signed avatar that travels with you.
Build a compact vector avatar that reconstructs from a tiny key carried inside every anchor you sign — so your identity appears on your posts, comments, and calls without loading a single image from a server.
- Reconstructed on the fly, never fetched
- Explicitly chosen — never inherited or faked
- Sixteen real styles, fully customizable
PHEUN LINKS
Speakable. Forever.
One link to any anchor, Guide ID, or Sign.
A pheun:// link points at any anchor, identity, or document — server-free and resolvable forever from the mesh itself. Drop one in a DM, a feed, or a Sign and it just opens, with no host that can ever let it die.
- No registrar, no shortener, no dead links
- Embed any anchor inside any other
- The address IS the content, cryptographically
GUIDE CHAIN
Every anchor, one lookup.
The chain IS the profile.
Search a Guide ID and walk their entire Personal Anchor Chain — every post, document, vote, and offer they’ve ever signed, in order, straight from the mesh. There is no profile page to curate; the history speaks for itself.
- Complete, tamper-proof, append-only
- Nothing hidden, nothing editable after the fact
- Filter by category, type, sign, or hashtag
YOUR NODE
Your node, your rules.
Tune everything. Own everything.
Your node is fully customizable — set the storage budget, the bandwidth cap, whether you relay for others, and which feeds you keep. Update it from the app with one click; if a build misbehaves, it rolls back on its own.
- Storage & bandwidth budgets you control
- Client or relay-host — a role, not a tier
- One-click redeploy with auto-rollback
ECONOMY
Barter, not banks.
Share resources, peer to peer.
Offer compute, bandwidth, storage, goods, or services as an economy anchor, and settle it directly with the other party over a DM or call. Pure peer-to-peer exchange, expressed as anchors — no fees, no token, no marketplace operator.
- No cryptocurrency, no gas, no platform cut
- The protocol is the medium; humans do the deal
- Every category of value, one data model
VAULT
Keep it, and it survives.
The archive is every citizen who cared.
Save any anchor to a collection and its payload is copied to your disk in full — it opens with the network unplugged. And because your node serves what it holds, your copy is handed to anyone on Earth who asks for that anchor, for as long as you keep it. Every anchor already survives on a guaranteed floor of copies that the network heals automatically; vaulting is how you lift the things that matter far above it.
- Yours offline — not a bookmark to someone else’s server
- Five vaulters take a 10 GB film from ~38% to ~97% survival
- Nothing is ever deleted to make room