Kunuleco Roadmap
What is done, what is being built now, and what comes next, in order.
- Done
- In progress
- Planned
- Queued
1Already shipped
Running today on the servers of the people testing Kunuleco.
- DoneIdentities that prove themselvesEvery account is a key history it controls, and every connection proves which account it is.
- DoneHalls that stay openA Hall stays up and reachable when its founder signs out, because the server hosts it.
- DoneTalk and move togetherMembers of a Hall can speak live and move avatars with their faces.
- DoneSigned postsEvery board post carries a signature from the person who wrote it, checked when it is read.
- DoneFound by name, and blocks that holdYour server is found by its own name, a block holds inside a Hall, and the app pins your server the first time it connects.
- DoneLive status, safer sign-in, honest namesThe app follows network and Hall settings as they change, sign-in resists password guessing, and look-alike names are refused.
- DoneClear sign-in messagesWhen sign-in is refused, you are told why in plain words, on every door.
- DoneBackups that workYou can make a backup of your identity and restore it on another server as the same identity.
2The clean break
One release that changes how servers talk to each other for good, and starts every test server fresh.
- DoneEncrypted connections between serversEvery connection between two servers is encrypted and proves who is at each end.
- DoneHall messages signed by their writerEach message in a Hall is signed by the person who wrote it, and every reader checks the signature.
- DoneInvites that carry the way to reach youInvites and codes carry the network addresses needed to reach you, so they work even when the directory is down.
- DoneA signed directoryEvery entry in the directory that helps servers find each other is signed by the server it describes.
- DoneSigned with your current keyPosts and notes are signed with your identity's current key, ready for the day you change it.
- DoneNames that are harder to forgeThe short tag after every name takes deliberate work to fake, so look-alike accounts are expensive to make.
- DoneA fresh start for every test serverEvery test server is wiped and reinstalled once, so the new protocol starts clean, with no data carried across.
- DoneReactionsReact to a line in a Hall or a post on a board with one of a small set of reactions.
- DoneA catalogue of bodiesChoose your avatar's body from a catalogue your server checks and downloads.
3Changing your key
The release right after, so an identity can replace its signing key and stay the same identity.
- DoneChange your own keyYou can replace your identity's signing key yourself, with clear warnings about what that does and does not protect.
- DoneEverything moves to the new key togetherWhen you change your key, everything you have signed moves to the new key at once, or nothing changes.
- DoneNo connection outlives an old keyAfter a key change, old connections are closed, so nothing keeps talking under the retired key.
- DoneContacts that follow a key changeWhen a contact changes their key, your server still knows them as the same person.
- DoneRestore to exactly where you wereRestoring a backup brings your identity back to the exact key it had when the backup was made.
- DoneCatch up after an old backupIf you restore an older backup, your server quietly fetches later key changes from the people you talk to.
- DoneA short greeting between serversServers greet each other with a short fingerprint of their identity history and exchange the full history only when needed.
- DoneClearer words for checking a serverThe command that checks a server's identity certificate is now called verify, so the word trust is kept for people.
- DoneReady for independent confirmationsServers learn to read independent confirmations of identity changes before anyone starts using them.
- In progressSteadier key changes and backupsAfter a key change your connections come back on every route, and a backup no longer needs more memory than a small server has.
4Ready for more testers
The last pieces before more people are invited in.
- PlannedStrangers can talk only where you meetSomeone you do not know can speak to you in a Hall you share, but cannot message you privately until you add them.
- PlannedMessage requestsSee and accept messages from people you have not added yet.
- PlannedInvitations that work onceYou can send an invitation that works once, or a set number of times, and expires, and you can withdraw it.
- PlannedMeet once, stay in touchScanning someone's in-person code once can make you a contact, so they can hear from you after you meet.
- PlannedYour own private routeEach person on a shared server gets a private network route of their own, so messages are sent and signed as that person.
- PlannedYour own onion addressEach person gets an onion address that reaches only them, and the server's own address keeps working for old invites.
- PlannedBe found by name, if you choosePeople who opt in can be reached by their name alone, and the listing does not reveal whether they are online.
- PlannedQuieter presenceServers announce only themselves, never which of their people are online.
- PlannedPublish to BlueskyPosts from a space you choose can be published to Bluesky and the wider AT Protocol network.
- DoneA forum-style board readerRead a board as threaded topics, newest activity first, with each post's signature check shown.
- PlannedTopic titles and faces in the board readerStart a topic with a title, and see each writer's picture beside their posts.
5Public alpha
The first release for anyone who wants to try Kunuleco.
- PlannedDatabases encrypted on diskYour server's databases are encrypted on disk, so a copied file on its own cannot be read or quietly changed.
- PlannedAn independent notaryThe project's own server can act as an independent notary that confirms when someone changes their key.
- PlannedChoose a notary for your keyYou can choose to have an independent notary confirm each change to your key, so others can trust it is really yours.
- PlannedTold plainly if copies disagreeIf two copies of your account disagree, you are told plainly which one to keep.
- PlannedVouches between peoplePeople can leave each other short, positive, signed notes of thanks or trust, shared with friends only after the person described agrees.
- PlannedKnow how you know someoneWhen you meet someone, your app tells you in a sentence how you know them, without asking anyone else and never with a score.
- PlannedMove up with a steward's confirmationMembers can ask to move up in a community by showing vouches, and a steward makes the final call.
- QueuedA newcomer Hall and a guided tourNew people start in a welcoming Hall with a tour that points at the real controls and small tasks that teach the basics.
6After the alpha
Everything else we have planned, roughly in this order.
- PlannedStewards with renewable termsWe are exploring renewable steward terms that members confirm, so stewardship rests on ongoing support.
- PlannedEvery steward can reach their HallsEvery steward of a Hall can enter it and use its tools, not only its founder.
- PlannedFind Halls on other serversThe Harbor can list open Halls on other servers whose owners and stewards chose to be listed, each checked by your server.
- PlannedDouble-check a newcomer's historyServers can check a newcomer's identity history with an independent notary before trusting it.
- PlannedCalls and always-on roomsOne-to-one calls, missed-call notes, rooms where voice is always on, and avatars that show the body you choose.
- PlannedEncryption between peopleMessages and live media encrypted from one person to another, so the servers in between cannot read them.
- PlannedA private modeAn opt-in mode in which a server is reached only through Tor and publishes nothing that links it to an address.
- PlannedDocuments that know what they areSigned documents gain shared meaning and lifecycles, so servers can reason about them and their history.
- PlannedSeparate faces of one identityOne person can keep separate identities for different parts of life, bound together only by a root they alone hold.
- PlannedRecovery through people you trustA lost key can be recovered with help from people you choose, and your spaces can pass on as you decide.
- PlannedHistory that survivesHall history and community spaces that survive any one server going away.
- PlannedA world to walk around inIslands for your spaces, verbs through the interface rather than typed commands, and a phone that can carry its own small server.
- QueuedRead the fediverseFollow accounts from Mastodon and the wider fediverse from inside Kunuleco, reading first and posting later.
- QueuedA bridge to MatrixA Hall can echo its conversation out to a Matrix room, with each member choosing whether their own words go across.
- QueuedMute and muffle in a HallLet a Hall's Stewards, and its automated keeper, stop someone being heard in the Hall or stop them hearing it, without a kick.
- QueuedGavroche, the starter Hall's keeperAn automated keeper in the public starter Hall, which can remove someone causing trouble and keeps a record of what it did, without a Steward's other powers.
- QueuedWalk between serversStep from your own world into a space on another server, as you would walk through a door.
- QueuedPublic posts and followingPost publicly from your own board, and follow people on other servers.
- PlannedIdentities that outlive their keysAn identity can keep changing its keys over a lifetime and can pass to the people its owner chooses, so it can outlive both its keys and the person who made it.
- QueuedPerform and teach to an audienceStream from one place to many people at once, for a performance, a class or a talk.