THE ROOM
“We have a table, a phone, and a question.”
EVERY ROOM KEEPS ITS OWN KEY
What if the internet could leave the building?
Carry a proposal from one independently controlled room to another—even between disconnected phones. No account, no shared central database, no institution enrolled by putting its name on a diagram.
“We have a table, a phone, and a question.”
“Could these extra vegetables help?”
Bluetooth, a file, a USB stick. The envelope doesn't require a server.
“I can HOLD this. Or REFUSE it. You don't get to decide for me.”
A cryptographic proof of a key's statement—not proof of identity or completed work.
Only an approved, inspectable method can move to another room.
TRAINING / PUBLIC-SAFE ONLY. Proposal text and signed JSON are not encrypted. Do not enter real addresses, vulnerable-person records, case files, private contacts, service credentials or confidential institutional material. An address fingerprint limits who can reply in this demo; it does not hide the content. This is not the encrypted Outbox.
Your browser generates a non-exportable signing key and stores it on this device. A church or campus name does not authorize you to represent it.
No device-local rooms yet.
Device loss or cleared browser storage destroys the signing identity: this first experiment does not export private keys. Signed messages remain portable; a room identity is not.
Select the room whose key signs the letter. The message itself remains readable to anyone holding the JSON file.
Phone A: download a signed JSON envelope below. Share it directly as a file—Bluetooth, USB, Nearby Share or other deliberate transfer.
Phone B: open this same web application, create a different room, and import the JSON. No online relay is required once the app shell is cached.
Signatures prevent unnoticed changes to the envelope. They do not identify an organization's legitimate spokesperson or protect confidentiality.
An independent room may sign HOLD, REFUSE or REVIEW. None of these decisions authorizes real-world action.
The sender may import this separately signed receipt, but cannot sign the receiver's key. Key ownership ≠ verified human identity.
Ready. Nothing transmitted, sent, enrolled or authorized.
REAL SIGNATURES. SELF-ATTESTED ORGANIZATIONS. Genesis means a locally signed proposal and accepted operating rules; it does not incorporate a legal entity, verify anyone's institutional authority, or publish a public directory. All cards are unencrypted public-safe plaintext; do not use private survivor, client, child, address or contact records. A parent invitation does not authorize or own a child.
Any room key may offer a method for founding another organization. Export the signed invitation JSON from the parcel desk. The recipient may refuse or ignore it.
A seed is a signed invitation from a key, not permission to operate at a venue or proof of a human identity.
Use a new, separately controlled local room key (create one at step 01). Optionally import a seed from an ancestor. You can also found a root without any ancestor.
Only nodes with one locally verifiable genesis may offer a public-safe capability. The directory below shows signed files on this device only; there is no central listing, crawl, search service or automatic broadcast.
The original key can sign a withdrawal to distribute to peers. Peers must import the withdrawal to update their own local view; public copies cannot be recalled.
NODE ALIVE requires actual independently controlled keys and records, a consensual crossing, a valid refusal, a successful offline field test, and real-world stewardship review. Browser records alone cannot certify it.
Nothing published, enrolled or sent by opening this page.
BUILD THE PHYSICAL SUITCASE · BENCH-003 ↗
OPEN PRINTABLE SIX-CARD PHYSICAL FOUNDING KIT ↗
How to reproduce: create two distinct keys on two devices. Device A signs and exports a SEED. Device B imports it, creates its own key, accepts rules, and signs a GENESIS. B can then sign a CAPABILITY. A imports the GENESIS and CAPABILITY files, sees the voluntary local listing, and can address an OFFER without forcing delivery or work. B can REFUSE and send back its own signed receipt. Paper copies can carry the same questions when no electronics work.
Every host retains its own facilities, power, data, permission and right to refuse. Choose a possible host type to print an inquiry and optionally sign an unverified host proposal from a room you actually control.
HOST COVENANT / A PROPOSAL IS NOT AN ADMISSION
No church, campus, co-op or event is onboarded by appearing here.
This does NOT create a real node, connect hardware, grant access, rent a space, or turn any institution into a partner. GHoT compute and reLATTE federation remain separate admission work.
Owner's files, local P-256 key, offline shell, offers and decisions.
WORKING HEREPublic JSON envelopes with digest and receiver-key response.
WORKING HERE · EXPERIMENTALFuture zero-knowledge-ish delivery queue, separate access policies and real identity/consent process.
NOT BUILT HEREFuture church, campus or co-op installation with physical permission and GHoT energy budgets.
NO HOST ENROLLEDProtocol boundary: SUITCASE-001 borrows reLATTE's proposal / receiver decision distinction but is not wire-compatible with production reLATTE. GRAFT review, planZ admission, secure routing, encrypted payloads, key backup, independent institutional verification and a real hosted relay remain gated work.