Messages that stay yours

S◉LOCK Messages is end-to-end encrypted messaging for the private operating system. Your words are sealed on the device with modern group cryptography. The network only carries ciphertext. a content-blind relay that cannot read, search, or sell the conversation.

How the encrypted path works.

Four layers. One honest rule: no plaintext on the server path.

1 · Crypto

MLS group encryption

A modern messaging layer based on Messaging Layer Security (MLS / OpenMLS), compiled for the desk as a WebAssembly core. One identity can hold many private conversations; each group ratchets forward so compromise of one moment does not rewrite the whole past.

2 · Session

Device identity & sessions

Key packages, welcomes, and conversation maps live in a session layer on the client. Snapshots can persist locally (with honest interim tradeoffs on webviews until TPM/keychain hardening).

3 · Relay

Blind vault transport

Delivery is store-and-forward of base64 ciphertext envelopes and welcomes. Optional direct path (WebRTC data channels) moves only sealed bytes; “relay-only” never exposes your IP to a peer when you choose privacy over peer-to-peer.

4 · Human

Safety numbers & held states

Compare a safety number out-of-band to confirm the channel. Calm UI states. waiting for secure channel and held · private , keep the product honest when encryption is not yet ready.

Threat model · plain language

What the network can see. and cannot

Every messenger that uses a server for offline delivery has a network path. S◉LOCK Messages is designed so that path is boring on purpose: timing and delivery metadata for routing, never the text of the conversation.

Can see Device tokens · delivery timing · ciphertext size buckets
Cannot see Message text · media plaintext · safety number digits
Push payload Exactly a wake marker. no content, no sender
Direct mode Peer may learn IP if you allow direct links

Perimeter & hardware security

Guardian sentinel. private systems under protection

Product surface

Built for the SILOCK desk.

A first-class package. not a rented web tab bolted on later.

1:1 & groups

Private threads

Founder threads, studio coordination, operator notes. conversations that belong on a private OS, not a public social graph.

Verify

Safety numbers

Compare codes in person or on a call you trust. Mark verified when they match. Clear when trust is broken.

Offline

Wake without content

Devices can be notified that mail exists without the notification path becoming a second inbox of plaintext.

Separate

Not Social Centre

Social Centre is community and feed. Messages is sealed direct conversation. Different jobs. Same OS.

Honest status

What is complete · what Founding Preview means

Crypto core complete MLS identity, multi-conversation session, encrypt/decrypt, snapshots. proven in the product stack, including browser load of the WASM core.
Blind vault complete Register, key packages, envelopes, welcomes, signals, rate limits, content-blind wake. the relay path does not require trust in reading content.
Safe-lane UI primitives Held and pending-secure states, safety number sheet, brand tokens for both S◉LOCK and companion skins. ready for cutover into live send.
Founding Preview rollout Shipping into the SILOCK desk is phased with the OS release train. Request Founding access for the private path available today; Messages rides that same residency story.

A private OS needs private conversation

Cloud chat products earn revenue from adjacency to your attention. S◉LOCK is built for people who already chose hardware and software they control. Encrypted messaging is not an add-on brand. it is the conversation layer of that system.

Published by VF Empire Ltd, Malta (EU). Suite package page also lives at /suite/messages.html.

Request Founding access All packages Roadmap Security