What exists, and what does not.

Why this page exists

There is a particular kind of dishonesty that has become normal here. A landing page describes a complete system in the present tense. A roadmap describes the same system in the future tense. Nowhere does anyone say which of the two you are actually looking at, and by the time you find out you have already sent money.

We would rather not do that. So this page keeps three lists and refuses to blur them. Things that are finished. Things that are being worked on. Things that are aspirations, written down so that we can be held to them later, and labelled as aspirations in the meantime.

If a claim on this site is not supported by something on this page, treat the claim as marketing and the page as the record. The record wins.

The phases

What we can claim today

Exactly one sentence, and it is the important one. Once the mesh is live, no public ledger will connect what you sent to what arrived. There will be no edge to follow between the two ends of a transfer, on any network, for anyone.

Note the tense. That capability belongs to phase three. Until phase three ships, the honest description of this project is that it is a swap venue with a privacy design in progress, and anyone telling you otherwise, including this site if we ever let it slip, is wrong.

What we cannot claim, and will not

While settlement is operated on your behalf, that operation has a view of a transfer while it is in flight. There is no way to say this that makes it sound better than it is, so here it is plainly: during phases one through three, the settlement service is a limitation. Phase four exists specifically to remove it, and until phase four ships, the limitation stands.

We also cannot claim that the instrument makes anyone anonymous. It removes a public record. It does not remove inference, it does not remove what someone might already know about you from elsewhere, and it does not remove the law. Any product that promises those things is either confused about what it built or lying about it.

A limitation you are told about is a design decision. A limitation you discover is a betrayal.

What we will not do

Some of these are promises about the product. Some are promises about how we will behave when it would be more profitable to behave differently. They are here so that breaking one is a visible act rather than a quiet drift.

We will not add a function that creates more supply

The supply is one billion and it only ever goes down. There is no mint authority, there will not be one, and there is no upgrade path that could introduce one without replacing the contract entirely in public view.

We will not move the goalposts on fees

The fee is charged once, on entry, and it is shown before you approve anything. If it ever changes, the change will be announced before it takes effect, and it will not be applied retroactively to anything already quoted.

We will not describe something as built before it is

This page is the test. If a thing is not on the finished list, it is not finished, regardless of how the rest of the site is worded. If you ever find the marketing running ahead of this page, that is a bug and we would like to hear about it.

We will not quietly change what the token is for

The token exists to receive the value the protocol earns. Fees buy it back and burn it. That is the entire mechanism and it will not be quietly repurposed into a governance token, a staking token, or anything else that would change what holding it means without a very loud announcement first.

How to check any of this

You should not take any of the above on faith, and we would prefer you did not. Everything that can be verified onchain is intended to be.

• Contracts are published and verified. Addresses appear in the deployment record and are linked from this site once they exist.
• The token contract either has a mint function or it does not. You can read it. That is a better guarantee than any sentence on this page.
• Buybacks and burns are onchain events. The running total is displayed in the terminal and the underlying transactions are public.
• This page changes when the software changes. If a phase moves, the reason will be stated rather than the entry quietly disappearing.

What happens after phase four

Honest answer: we are not sure yet, and we would rather say so than invent a roadmap to fill the space. The four phases above are a complete description of everything we have committed to build. Anything beyond them will be written down here only when it is real enough to describe accurately.

The direction we are interested in is unglamorous. More supported networks, so that fewer people have to move their funds somewhere else first. Better clarity about what a transfer costs and why. Audits, plural, from more than one firm, published in full including the parts we did not enjoy reading.

What we are not interested in is adding features to a product whose entire value comes from doing one thing and doing it without exceptions. The temptation to bolt on a lending market or a points programme will be resisted, and if it is ever not resisted, this page will say so first.