A growing family of applications and a protocol, built so your data — your contacts, your documents, your estate, your table — answers to your keys, and no one else's. Built on nostr, over scoped data grants.
Everything here stands on NIP-DA — Scoped Data Grants: private, live, revocable data over public relays. You publish an encrypted scope under your own key and hand its key to whoever needs it. They always read your current version. And when you want them out, you don't edit an access list on someone's server — you rotate the key, and their copy simply stops opening. No policy to trust. No account to close. No company in the middle. The signature is the authorization; the rotation is the revocation.
Each is the same three lines underneath — receive the grants addressed to you, keep the newest, decrypt the current truth — wearing a different job. All shipped, all public, and the list keeps growing.
The primitive everything else is built on.
Scoped Data Grants — the ~300-line primitive every app above vendors identically. Three event kinds: the encrypted scope, the gift-wrapped grant, the self-encrypted index. A NIP submitted to the nostr protocol, with TS and Go implementations in live interop.
Bounding an agent on both ends — what it may perceive, and what it may do.
Delegate data to an AI agent, end-to-end encrypted to its key, dereferenced live, severable in one keystroke. OAuth hands out a token into a system that keeps your data; Nvoy hands out the data — and lets you un-see it.
The same primitive, pointed at a corner of a life you’d rather keep.
Your address book isn't a database — it's the sum of what people currently grant you. Update your card once; everyone holding it dereferences the new truth. Move, change numbers, drop someone — one edit, everyone current.
Live document sharing where a shared file is a scope: revocation instead of expiring links, recovery from your key alone. Big payloads ride encrypted on Blossom with the key delivered by grant — same wire, bigger cargo.
A family break-glass legacy vault: one estate record in per-beneficiary scopes, heirs holding revocable grants, the whole thing reconstituting from a single key printed on paper. No company between you and your family — nothing to be breached or sunset in thirty years.
Where the protocol is the board.
A spycraft mystery where information is the board. Documents are grants; discovery is a gift wrap; a burned contact is a key rotated past you. An AI game-master runs your table as a delegated agent you can hire and fire over nostr — and the whole game proves itself fair before it deals a card. The stack, load-bearing and in public.
A phones-only party game of secrets, dilemmas, and blackmail. Every answer is an encrypted scope; pairwise prisoner's-dilemma trades decide who sees what. Its design law is the protocol's honesty clause played for keeps: you can revoke a secret, but you can't un-tell it.
Nave is one person's argument, made in running code: that when your identity is a keypair you hold and your relationships are grants you can revoke, no platform owns you. That is the whole of Identity = Freedom — not a slogan, a stack. Each application is a proof of the same sentence, pointed at a different corner of a life you'd rather keep.