SysAdmin
acd3ebe7f2
Inspection of ../SilverVPN/clients/SilverVPN.Client.Chat reveals a mature, production-grade SilverChat implementation: - Cross-platform MAUI client (Windows / macOS / Android / iOS) - 13 ViewModels + 13 Views — feature-complete UX (contacts, conversations, group chat, invites, safety numbers, settings, login) - Signal Protocol crypto: Double Ratchet, X3DH (PreKey + Identity stores), Safety Numbers, encrypted attachments - VpnChatTransport — chat carried over the SilverVPN tunnel itself, eliminating third-party metadata exposure - Server-side already in SilverVPN.Api: ChatHub (SignalR), ChatController, ChatAttachmentController, ContactsController - Windows MSI installer wired (installer/silverchat/SilverChat.wxs) Decision: adopt-as-is, do not duplicate. SilverChat is more advanced than the v1.1 plan (which considered Matrix / Signal-fork) — three wins: 1. Signal Protocol natively, not a tentative fork 2. Chat over the VPN tunnel — better metadata hygiene 3. Cross-platform on day one Changes: - stack/chat/README.md rewritten as integration pointer (mirror of stack/vpn/) - stack/README.md status table updated; SilverChat promoted v1.1 → v1 - docs/roadmap.md: new milestone 1.9 (Chat integration into Linux v1); Phase 1.1 alignment-review milestone removed (resolved by this finding); remaining 1.1 milestones renumbered - root README.md: Stack table + Status table updated Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
88 lines
4.8 KiB
Markdown
88 lines
4.8 KiB
Markdown
# SilverMetal
|
|
|
|
> **Privacy-hardened devices for users who want their privacy back — on whatever platform they have.**
|
|
|
|
SilverMetal is SilverLABS' cross-platform privacy-hardening program. We don't believe in "one true OS" — we meet users on the platform they actually use, and give them the strongest hardening that platform physically allows. Honestly labelled, no marketing fluff.
|
|
|
|
## Two product lines
|
|
|
|
The SilverMetal program ships two distinct product lines, named to make their scope obvious to buyers:
|
|
|
|
### 🔒 SilverMetal OS
|
|
**We ship the operating system or ROM.** Full kernel-level control, our verified-boot key, our update channel. Strongest possible hardening.
|
|
|
|
- **SilverMetal OS — Linux** *(Debian/Kicksecure-based ISO)* — Tier A
|
|
- **SilverMetal OS — Pixel** *(GrapheneOS-fork ROM)* — Tier B
|
|
- **SilverMetal OS — Samsung** *(LineageOS-fork ROM, unlocked-bootloader models)* — Tier C
|
|
- **SilverMetal OS — Motorola** *(DivestOS/LineageOS-fork ROM)* — Tier C
|
|
|
|
### 🛡️ SilverMetal Enhanced
|
|
**We harden the OS your device already runs.** Configuration profiles, hardening installers, the SilverLABS Application Stack. For users who can't or won't replace their OS.
|
|
|
|
- **SilverMetal Enhanced — Windows** *(LTSC IoT installer + hardening + Stack)* — Tier C
|
|
- **SilverMetal Enhanced — macOS** *(signed config profile + setup script + Stack)* — Tier C-D
|
|
- **SilverMetal Enhanced — iOS** *(MDM profile + Stack)* — Tier D
|
|
- **SilverMetal Enhanced — Android** *(generic profile + Stack on existing Android)* — Tier D
|
|
|
|
Tiers explained in [`docs/platform-matrix.md`](docs/platform-matrix.md).
|
|
|
|
## What every SilverMetal device gets
|
|
|
|
Both lines ship the **SilverLABS Application Stack** — a suite of cross-platform privacy apps that replace the cloud services your device normally talks to (Google, Apple, Microsoft):
|
|
|
|
| Component | Status | Purpose |
|
|
|---|---|---|
|
|
| **SilverBrowser** | v1 (Linux MVP) | De-Googled, telemetry-free, fingerprint-resistant browser |
|
|
| **SilverVPN** | **Existing** — see [`SilverLABS/SilverVPN`](https://git.silverlabs.uk/SilverLABS/SilverVPN) | Always-on, no-logs VPN with our own infrastructure |
|
|
| **SilverSync** | v1 (Linux MVP) | Private replacement for iCloud / Google Drive / OneDrive |
|
|
| **SilverChat** | **Existing** — `SilverVPN.Client.Chat`, Signal Protocol over VPN transport. Promoted from v1.1 to v1 | E2EE messenger |
|
|
| **SilverDuress** | v1.1 | Duress password / panic-wipe / anti-coercion |
|
|
| **SilverKeys** | v1.1 | Zero-knowledge password + 2FA manager |
|
|
|
|
## Two ways to get SilverMetal
|
|
|
|
Every flavour — OS or Enhanced — supports both buyer modes:
|
|
|
|
### "I'm choosing a new device"
|
|
Buy a **preflashed SilverMetal SKU**. We've done all the work; it arrives ready.
|
|
|
|
### "I already own a device and want to harden it"
|
|
Download the **free SilverLABS Stack** + the **SilverMetal OS or Enhanced package** for your platform. Apply it yourself. Same software, same hardening, no hardware lock-in.
|
|
|
|
## Status
|
|
|
|
| Component | Status |
|
|
|---|---|
|
|
| Documentation + roadmap | Initial scaffold complete |
|
|
| SilverMetal OS — Linux v1 | Phase 1 — moving to milestone 1.1 (build pipeline) |
|
|
| SilverLABS Stack v1 (Browser + Sync) | Planning |
|
|
| SilverVPN | Existing product, integration into v1 ISO planned |
|
|
| SilverChat | Existing product (`SilverVPN.Client.Chat`); promoted to v1, integration into v1 ISO planned |
|
|
| Other OS/Enhanced flavours | Planning, post-Linux v1 |
|
|
|
|
See [`docs/roadmap.md`](docs/roadmap.md) for the milestone-driven plan.
|
|
|
|
## Related repositories
|
|
|
|
| Repo | Relationship |
|
|
|---|---|
|
|
| [`SilverLABS/SilverVPN`](https://git.silverlabs.uk/SilverLABS/SilverVPN) | The VPN component of the SilverLABS Stack — already in production. SilverMetal integrates it; does not re-implement it |
|
|
| [`SilverLABS/SilverApple`](https://git.silverlabs.uk/SilverLABS/SilverApple) | **Deprecated.** Earlier iOS-hardening prototype, superseded by *SilverMetal Enhanced — iOS* |
|
|
| [`SilverLABS/SilverDROID`](https://git.silverlabs.uk/SilverLABS/SilverDROID) | Unrelated (SilverSHELL AppStore Android client). Name is similar but scope is different |
|
|
|
|
## Documentation
|
|
|
|
- [`docs/threat-model.md`](docs/threat-model.md) — who we defend against, who we don't
|
|
- [`docs/design-principles.md`](docs/design-principles.md) — privacy-by-default, verifiability, honesty
|
|
- [`docs/platform-matrix.md`](docs/platform-matrix.md) — full per-platform pros/cons
|
|
- [`docs/roadmap.md`](docs/roadmap.md) — milestones, ship order, scope
|
|
- [`docs/trust-model.md`](docs/trust-model.md) — signing keys, reproducible builds, governance
|
|
|
|
## License
|
|
|
|
Components carry their own licenses (most are GPL/MIT/Apache-derived from upstream forks). Original SilverLABS-authored glue code is AGPL-3.0-or-later. See [`LICENSE`](LICENSE).
|
|
|
|
## SilverLABS
|
|
|
|
SilverMetal is built by [SilverLABS](https://silverlabs.uk) — privacy-first infrastructure and applications.
|