A five-verb kernel, and a two-person chat whose identity is a key you birth in a ceremony, not an account a provider owns. Two devices, one LAN, and a laptop acting only as a dumb relay: it routes bytes and never learns who is talking. Identity is a device-held cryptographic key born in a short in-person ceremony rather than a signup form, and it can be revoked by a signed stop-order if it ever needs to be. The project runs under a strict evidence discipline: every load-bearing claim carries a dated verdict, and a single headless battery re-runs the whole proof in about a minute for anyone who wants to check it rather than trust it. It also publishes its own honest limits rather than hiding them — no defence yet against a copied software key, no forward secrecy against a compromised recipient key — because a research proof that names its own weakest link is worth more than one that overclaims it. Framed as decentralization: an identity that answers to no server that knows who you are.