Local-first data
Your history lives on your hardware first and syncs encrypted. Go offline and keep working - the enclave never depends on someone else's server staying up.
On-device
The Personal Identity Protocol
We do not build for the next quarter. We architect for the next century. PIP is a watertight digital enclave where your identity, your keys, and your circle answer to you alone - the same doctrine that holds a Delplanche timber frame airtight to the millimeter.
One philosophy governs everything we steward, in timber and in code: vlijmscherp precision and waterdicht integrity. A wall that leaks air fails the house. A protocol that leaks data fails the person. We close both gaps completely, because half-sealed is not sealed.
Razor-sharp engineering. Every interface measured, every edge case sealed, no slack left in the build - the standard carried over from detailing a timber frame.
Watertight by construction. Encryption is the building envelope, not a finishing coat. Sealed end to end, with no gap left to leak.
Sovereign by default. Your identity, keys, and circle answer to you. We hold nothing we could be compelled to surrender.
The enclave is assembled from sovereign pods on the open Matrix protocol - federated, never centralized. Each layer is load-bearing, and each one is yours. PIP holds nothing it could be compelled to surrender, because it holds nothing at all.
Your history lives on your hardware first and syncs encrypted. Go offline and keep working - the enclave never depends on someone else's server staying up.
On-deviceKeys are generated and held on your device, never escrowed to a platform. We could not read your conversations if we tried - and that is the design.
Never escrowedBuilt on the open Matrix protocol. Federated, portable, and yours to leave with intact - the pod stands even if we disappear tomorrow.
Open protocolCentralized platforms own the room you talk in. PIP inverts that. Built on the open Matrix protocol with end-to-end encryption by default, it puts the keys, the storage, and the membership in your hands.
Trust is not assumed - it is sealed. Every consent is a deliberate, physical act: press, and the device derives your session signature on the spot, pulses to confirm, and settles. The key that produced it never leaves your hands.
Derived client-side
The session digest is computed in this browser. No round trip, no server signature.
Haptic confirmation
The device pulses on supporting hardware - consent you can feel, not a silent background call.
Mirrors verification
The same gesture PIP uses to cross-sign a device and confirm a fingerprint.
Demonstration · simulated digest · nothing transmitted
0000 0000 0000 0000
derived client-side · key held on device

Mauro Poelmans
conclave · The Steward · België
The discipline began in Houtskeletbouw - timber-frame construction, where airtightness is measured, thermal bridges are hunted down, and a misplaced millimeter rots the wall from the inside. That standard is the philosophical foundation of PIP. A watertight envelope is what separates a house that lasts a century from one that fails quietly. Privacy is the same problem in a different material: seal it completely, or do not call it sealed.

The Chancellery
No download. No account broker. Open the secure web client and your keys are forged on the spot, held only by you.
Launch Web Enclavedelplanche.conclave.poke.site/#/chat