SilverLABS/SilverMetal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(naming): adopt OS / Enhanced product-line framing + align with existing repos

Browse Source 
Two product lines, named to make scope obvious to buyers:
- 🔒 SilverMetal OS — we ship the operating system or ROM
  (Linux, Pixel, Samsung-unlocked, Motorola-unlocked)
- 🛡️ SilverMetal Enhanced — we harden the OS the device already runs
  (Windows, macOS, iOS, generic Android)

Repo alignment:
- SilverVPN already exists as a SilverLABS product (server + MAUI client +
  Linux client + tunnel service). stack/vpn/ is now an integration pointer
  rather than a re-scaffold; per-platform READMEs reference it.
- SilverApple is deprecated; SilverMetal Enhanced — iOS supersedes it.
  Migration step added as roadmap milestone 3I.1.
- SilverDROID name clash explicitly noted as unrelated (it's the SilverSHELL
  AppStore Android client, not an Android ROM).
- SilverChat may overlap with SilverVPN.Client.Chat; alignment decision
  added as roadmap milestone 1.1.1.

Roadmap restructured: phases now track the OS/Enhanced split.
Platform matrix re-sectioned and decision flowchart updated.
README rewritten around the two-product-line framing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
SysAdmin
2026-04-25 03:30:45 +01:00
parent 7d5f9cc246
commit 0a0075ce66
10 changed files with 316 additions and 224 deletions
Download Patch File Download Diff File Expand all files Collapse all files

90
README.md
View File

@@ -2,72 +2,84 @@
> **Privacy-hardened devices for users who want their privacy back — on whatever platform they have.**
SilverMetal is SilverLABS' cross-platform privacy-hardening program. We don't believe in "one true OS" — we believe in meeting users on the platform they actually use, and giving them the strongest hardening that platform physically allows. Honestly labelled, no marketing fluff.
SilverMetal is SilverLABS' cross-platform privacy-hardening program. We don't believe in "one true OS" — we meet users on the platform they actually use, and give them the strongest hardening that platform physically allows. Honestly labelled, no marketing fluff.
## What you get
## Two product lines
Every SilverMetal device — whether you bought one preflashed or you're hardening your own — ships two layers:
The SilverMetal program ships two distinct product lines, named to make their scope obvious to buyers:
1. **The SilverLABS Stack** — a suite of cross-platform privacy apps that replace the cloud services your device normally talks to (Google, Apple, Microsoft):
- **SilverBrowser** — de-Googled, telemetry-free, fingerprint-resistant
- **SilverVPN** — always-on, no-logs, our own infrastructure
- **SilverSync** — private replacement for iCloud / Google Drive / OneDrive
- **SilverChat** — end-to-end encrypted messenger *(v1.1)*
- **SilverDuress** — duress password / panic-wipe *(v1.1)*
- **SilverKeys** — zero-knowledge password manager *(v1.1)*
### 🔒 SilverMetal OS
**We ship the operating system or ROM.** Full kernel-level control, our verified-boot key, our update channel. Strongest possible hardening.
2. **A Platform Hardening Profile** — OS-level changes tailored to what your platform allows:
- On **Linux** we ship a full custom OS
- On **Android** we ship a custom ROM (or a profile, depending on your device)
- On **Windows** we ship an installer that transforms LTSC IoT into a hardened build
- On **macOS** and **iOS** we ship signed configuration profiles + setup scripts
- **SilverMetal OS — Linux** *(Debian/Kicksecure-based ISO)* — Tier A
- **SilverMetal OS — Pixel** *(GrapheneOS-fork ROM)* — Tier B
- **SilverMetal OS — Samsung** *(LineageOS-fork ROM, unlocked-bootloader models)* — Tier C
- **SilverMetal OS — Motorola** *(DivestOS/LineageOS-fork ROM)* — Tier C
### 🛡️ SilverMetal Enhanced
**We harden the OS your device already runs.** Configuration profiles, hardening installers, the SilverLABS Application Stack. For users who can't or won't replace their OS.
- **SilverMetal Enhanced — Windows** *(LTSC IoT installer + hardening + Stack)* — Tier C
- **SilverMetal Enhanced — macOS** *(signed config profile + setup script + Stack)* — Tier C-D
- **SilverMetal Enhanced — iOS** *(MDM profile + Stack)* — Tier D
- **SilverMetal Enhanced — Android** *(generic profile + Stack on existing Android)* — Tier D
Tiers explained in [`docs/platform-matrix.md`](docs/platform-matrix.md).
## What every SilverMetal device gets
Both lines ship the **SilverLABS Application Stack** — a suite of cross-platform privacy apps that replace the cloud services your device normally talks to (Google, Apple, Microsoft):
| Component | Status | Purpose |
|---|---|---|
| **SilverBrowser** | v1 (Linux MVP) | De-Googled, telemetry-free, fingerprint-resistant browser |
| **SilverVPN** | **Existing** — see [`SilverLABS/SilverVPN`](https://git.silverlabs.uk/SilverLABS/SilverVPN) | Always-on, no-logs VPN with our own infrastructure |
| **SilverSync** | v1 (Linux MVP) | Private replacement for iCloud / Google Drive / OneDrive |
| **SilverChat** | v1.1 (may overlap with `SilverVPN.Client.Chat`) | E2EE messenger |
| **SilverDuress** | v1.1 | Duress password / panic-wipe / anti-coercion |
| **SilverKeys** | v1.1 | Zero-knowledge password + 2FA manager |
## Two ways to get SilverMetal
Every flavour — OS or Enhanced — supports both buyer modes:
### "I'm choosing a new device"
Buy a **preflashed SilverMetal SKU** — a Pixel with SilverMetal Droid, a Coreboot laptop with SilverMetal Linux, etc. We've done all the work; it arrives ready.
Buy a **preflashed SilverMetal SKU**. We've done all the work; it arrives ready.
### "I already own a device and want to harden it"
Download the **free SilverLABS Stack** + the **hardening profile / installer / ROM** for your existing platform. Apply it yourself. Same software, same hardening, no hardware lock-in.
Every platform supports both modes. Nothing is premium-only; nothing is DIY-only.
## Platform matrix
| Platform | Hardening tier | What ships | Best for |
|---|---|---|---|
| **SilverMetal Linux** | A — full control | Custom Debian/Kicksecure-based ISO | Maximum privacy; users whose work is browser/office/dev/comms |
| **SilverMetal Droid (Pixel)** | B — verified boot ours | GrapheneOS-based ROM | "Secure phone" buyers, journalists, high-risk users |
| **SilverMetal Droid (Samsung / Motorola)** | C — varies | LineageOS/DivestOS-based ROM where supported, profile + stack elsewhere | Users with existing non-Pixel Android |
| **SilverMetal Droid (generic)** | D — app + profile only | Stack install + work-profile hardening | "I have an Android, harden it" |
| **SilverMetal Windows** | C — config layer | LTSC IoT installer + Stack + Group Policy hardening | Users locked into Windows-only software |
| **SilverMetal macOS** | C-D — config + Stack | Signed config profile + setup script + Stack | Mac-committed users |
| **SilverMetal iOS** | D — profile + curated apps | MDM profile + Stack from App Store | iPhone users wanting maximum-feasible hardening |
For honest pros/cons of each, see [`docs/platform-matrix.md`](docs/platform-matrix.md).
Download the **free SilverLABS Stack** + the **SilverMetal OS or Enhanced package** for your platform. Apply it yourself. Same software, same hardening, no hardware lock-in.
## Status
| Component | Status |
|---|---|
| Documentation + roadmap | **In progress** (this scaffold) |
| SilverMetal Linux v1 | Planning → milestone 2 (build pipeline) |
| SilverLABS Stack v1 (Browser + VPN + Sync) | Planning |
| Other platforms | Planning, post-Linux v1 |
| Documentation + roadmap | Initial scaffold complete |
| SilverMetal OS — Linux v1 | Phase 1 — moving to milestone 1.1 (build pipeline) |
| SilverLABS Stack v1 (Browser + Sync) | Planning |
| SilverVPN | Existing product, integration into v1 ISO planned |
| Other OS/Enhanced flavours | Planning, post-Linux v1 |
See [`docs/roadmap.md`](docs/roadmap.md) for the milestone-driven plan.
## Related repositories
| Repo | Relationship |
|---|---|
| [`SilverLABS/SilverVPN`](https://git.silverlabs.uk/SilverLABS/SilverVPN) | The VPN component of the SilverLABS Stack — already in production. SilverMetal integrates it; does not re-implement it |
| [`SilverLABS/SilverApple`](https://git.silverlabs.uk/SilverLABS/SilverApple) | **Deprecated.** Earlier iOS-hardening prototype, superseded by *SilverMetal Enhanced — iOS* |
| [`SilverLABS/SilverDROID`](https://git.silverlabs.uk/SilverLABS/SilverDROID) | Unrelated (SilverSHELL AppStore Android client). Name is similar but scope is different |
## Documentation
- [`docs/threat-model.md`](docs/threat-model.md) — who we defend against, who we don't
- [`docs/design-principles.md`](docs/design-principles.md) — privacy-by-default, verifiability, honesty
- [`docs/platform-matrix.md`](docs/platform-matrix.md) — what each platform can and cannot deliver
- [`docs/platform-matrix.md`](docs/platform-matrix.md) — full per-platform pros/cons
- [`docs/roadmap.md`](docs/roadmap.md) — milestones, ship order, scope
- [`docs/trust-model.md`](docs/trust-model.md) — signing keys, reproducible builds, governance
## License
Components carry their own licenses (most are GPL/MIT/Apache-derived from upstream forks). See individual directories.
Components carry their own licenses (most are GPL/MIT/Apache-derived from upstream forks). Original SilverLABS-authored glue code is AGPL-3.0-or-later. See [`LICENSE`](LICENSE).
## SilverLABS