Nishi Family › Compare › Connection, Language Exchange and Meetup
Nishi Compare · measured, not asserted
Connection, Language Exchange and Meetup
Nishi vs the field — every Nishi cell is measured against real organ source at emit time; each gap names the watch contract that will close it.
Nishi CONNECT vs Tandem and HelloTalk and Meetup and Discord and Signal and Matrix/Element
Layer 1 · Executive
Where we are. Measured 2026-08-19. Presence: 43 of 52 matrix rows measured against source, 1 exceed (the two-deep youth wall), 9 watch contracts. Depth, from the estate's own cynical gauge run live this day (nx_connect_maturity, registered on the MCP surface and executed -- the number below is read from the run artifact): raw 21/48, PRODUCTION-READINESS 437/1000, one author-optimism downgrade applied by hg_grade, 0 real users. What is REAL underneath: sovereign TLS 1.3 serving nishifamily.com, live OPAQUE login (RFC 9807), the X25519 agreed-key E2E loop over the public edge, and the 11-page zero-JS app at /connect (gate 8 of 8, GET and POST verified over the edge; 11 = the CS_P page constants in the serve core, not a hand count). The August-2026 field this page is graded against: Discord DAVE E2EE universal for calls [discord-dave-all], RCS UP3.0 MLS E2EE in beta between iPhone and Android [apple-rcs], Signal shipping automatic key verification [signal-akv] and rolling out the SPQR post-quantum ratchet [signal-spqr], WhatsApp shipping free on-device translation [whatsapp-translate], Matrix/Element self-hosting at national scale [element-bundeswehr], and Duolingo moving AI conversation practice into its mainstream tier [duolingo-videocall]. Three of the four old exceeds retired against that field; the distance is this roadmap.
Where we need to go. A product people actually install and use, with the safety architecture as SHIPPING CRITERIA no rung may trade away: the two-deep wall, fail-closed CSAE reporting, content-blind serving and zero paywalled connection features. Then, in order: the proven A/V codec inside every call, a native mobile shell over the same content-blind core, a seeded cohort on the wedge vertical so a new member meets someone tonight, and trained no-float matching and moderation models behind the behavioral signals. Depth follows the gauge, not the matrix: a rung that flips a watch without moving nx_connect_maturity is a stub by definition.
The unit. 1 u = one measured session-leg (estate calibration: graphics R21 in one leg 2026-08-15). Local evidence: the public web app landed gate 8/8 with GET+POST verified over the edge in one leg; the OPAQUE login plus the agreed-key E2E loop landed in one leg on 2026-07-25; trained-model rungs carry more risk than organ rungs.
Where we are: 437 permil readiness, 43 of 52 present. Safety architecture at or beyond the field; presence across chat, events, community, crypto and API; STUB depth on translation quality, messaging scale, media, matching scale and moderation; ABSENT push, native apps and users.
Cost to a durable wedge cohort: 5 u. CN5 family-realm accounts + CN6 messaging on the durable store + CN3 cohort seeding -- a cohort invited onto an app that forgets messages on restart would be a false launch, so the store precedes the invite.
Cost to sealed calls in a pocket: 8.5 u. CN7 AEAD wired live + CN8 post-quantum hybrid + CN1 codec into calls + CN2 the native shell with push.
Cost to learned, speaking intelligence: 7.5 u. CN9 real NMT through the LLM serve (graded against the WMT25 finding that LLM-class systems lead [wmt25]) + CN4 trained matching and moderation + CN11 the practice partner.
Cost to everywhere: 4 u. CN10 live voice translation in calls + CN12 the federation probe.
Research bar. The live app (ours) is measured on 11 pages, zero JS, ADA, OPAQUE login, sealed inbox. Theirs: incumbents ship polished native apps to millions. Ours: LIVE -- home, partners, chat, reconnect, community, events, secure, contacts, login, register, account.
Research bar. Discord DAVE (E2EE calls) is measured on default E2EE on every call surface. Theirs: universal since March 2026, MLS group keying, no text E2EE [@discord-dave-all]. Ours: our room model is gate-proven, not composed live -- rungs CN1, CN7, CN8.
Research bar. Signal (E2E depth) is measured on post-quantum ratchet + automatic key verification. Theirs: SPQR rolling out [@signal-spqr], AKV shipped Aug 2026 [@signal-akv]. Ours: our X25519 loop is live; PQ and the ratchet are CN8.
Research bar. RCS UP3.0 (interoperable E2EE) is measured on cross-vendor MLS E2EE. Theirs: iPhone-Android beta since May 2026 [@apple-rcs]. Ours: federation is the CN12 contract.
Research bar. Matrix/Element (self-host) is measured on self-hosted secure messaging at national scale. Theirs: 100000-plus Bundeswehr users [@element-bundeswehr]. Ours: we self-host the whole stack from the assembler up; their deployed scale is the depth bar.
Research bar. Tandem and HelloTalk is measured on installed user base, native apps, in-chat correction. Theirs: distribution [@tandem] [@hellotalk]. Ours: CN2 and CN3.
Research bar. WhatsApp translation (the free field) is measured on free on-device in-chat translation. Theirs: six languages Android, 19-plus iPhone, on-device [@whatsapp-translate]. Ours: ours is unlimited by construction but lexicon-grade -- CN9 is the answer.
43 of 52 capabilities measured|1 of them measured exceeds|9 open|coverage 826/1000|adoption 15 full / 28 partial
Layer 2 · Roadmap
Do this next — computed by the ranker, never chosen by a seat
Order from nx_compare_rank (nx_dr_ocm: (deficit + cost-of-delay + option + enables) x sponsor x self-sufficiency x momentum / cost). FINISH rows are rungs whose symbol is present but whose organ is short of full adoption: the cheapest closures on this board, listed before any new work. Stamp: # asof=1787883482 domain=connect target_version=0.1 rungs=16 done=3 open=13 finish=2 ranker=nx_dr_ocm
| # | Stage | Rung | Priority | Derivation |
|---|---|---|---|---|
| F | FINISH | Content-blind room receive (CB0) recv_bw_svc | SOURCE-ONLY | source exists, never compiled: /api/build it |
| F | FINISH | Public web app (CB1) so_feed | SOURCE-ONLY | source exists, never compiled: /api/build it |
| #1 | 0.1 | Cohort seeding on the wedge (CN3) lq_cohort_seed | 3150 | v=21 m=3 c=20 |
| #2 | 0.1 | Family-realm account unification (CN5) acc_realm_unify | 400 | v=6 m=1 c=15 |
| #3 | 0.1 | Messaging core on the durable store (CN6) msg_store_append | 333 | v=5 m=1 c=15 |
| #4 | later | Native mobile shell (CN2) cl_mobile_shell | 1200 | v=24 m=2 c=40 |
| #5 | later | Codec bound into calls (CN1) cc_call_codec_bind | 1000 | v=10 m=2 c=20 |
| #6 | later | Trained matching and moderation (CN4) nn_match_train | 900 | v=18 m=2 c=40 |
| #7 | later | AI conversation-practice partner (CN11) cp_practice_turn | 266 | v=4 m=1 c=15 |
| #8 | later | AEAD sealing wired into the live serve (CN7) cs_sealed_aead | 200 | v=2 m=1 c=10 |
| #9 | later | Post-quantum hybrid key agreement (CN8) kx_pq_hybrid | 133 | v=2 m=1 c=15 |
| #10 | later | Real NMT through the LLM serve (CN9) ct_llm_translate | 100 | v=2 m=1 c=20 |
| #11 | later | Federation probe (CN12) fed_route | 100 | v=2 m=1 c=20 |
| #12 | later | Live voice translation in calls (CN10) lt_call_caption | 50 | v=1 m=1 c=20 |
| #13 | later | Honesty gauge on the surface (CB3) nx_connect_maturity | 0 | v=0 m=1 c=100 |
Critical path — contract, done-rule, executor, cost
| Rung | Closes with | Definition of done (pre-declared) | Executor | Est. |
|---|---|---|---|---|
| Content-blind room receive (CB0) | recv_bw_svc | SVC layout-aware receive, server decodes 0 -- LANDED, gated | Organ | 0 u |
| Public web app (CB1) | so_feed | Live at nishifamily.com/connect, gate 8/8 over the edge -- LANDED | Organ | 0 u |
| Reciprocal matching (CB2) | mx_inter_popc | Harmonic-mean reciprocity -- LANDED | Organ | 0 u |
| Honesty gauge on the surface (CB3) | nx_connect_maturity | LANDED 2026-08-19: registered on the MCP surface (/api/tools/register, callable) and run live -- 437/1000 published on this page from the run artifact, never from prose | Organ | 0 u |
| Codec bound into calls (CN1) after CB0 | cc_call_codec_bind | The sovereign vcodec encodes and decodes inside the call path that CB0 already receives content-blind; gate proves a two-peer call round-trips a frame through our encoder and the server still decodes zero bytes | Organ | 2 u |
| Native mobile shell (CN2) after CB1 | cl_mobile_shell | A native shell over the existing web core (same auth, same content-blind store) with push, camera and mic permissions; done-rule: the web gate's 8 teeth pass through the shell on a real device and the youth wall is enforced identically; push delivery (push_deliver) is part of this done-rule -- a message posted while the app is closed produces a device notification | Organ | 4 u |
| Cohort seeding on the wedge (CN3) after CB1,CB2,CN6 | lq_cohort_seed | Invite-by-token cohorts for the LDS community vertical with the reconnection lane as the hook; the connection-quality funnel (replies, meetings) is the ruler; done-rule: a seeded cohort shows a measured reply rate above the empty-room baseline within its first week, published beside the cohort size | Organ | 2 u |
| Trained matching and moderation (CN4) after CB2,CN3 | nn_match_train | No-float models trained on consented behavioral signals only (no plaintext), replacing the hand-weighted reciprocity and abuse scores where they measure better; pre-declared accept rule: beat the hand-weighted baseline on a held-out labelled set or stay UNWIRED | Organ | 4 u |
| Family-realm account unification (CN5) | acc_realm_unify | The nishi_connect OPAQUE realm joins the family-wide identity so one account spans CONNECT and the suite; done-rule: login on /connect with a family account round-trips whoami, the auth gate stays GREEN, and the gauge's accounts row re-grades on evidence | Organ | 1.5 u |
| Messaging core on the durable store (CN6) after CN5 | msg_store_append | The per-session in-memory thread becomes the per-account durable world end to end (send, receipts, edit and delete surviving restart, two accounts proven isolated); done-rule: the accounts gate grows a restart tooth and the gauge's messaging row moves STUB to PARTIAL on evidence | Organ | 1.5 u |
| AEAD sealing wired into the live serve (CN7) after CN6 | cs_sealed_aead | /connect/secure stores Poly1305-tagged sealed messages and REJECTS tamper live, positive and negative proven over the edge; retires the unauthenticated stream the seal gate neg-controls (cseal teeth already GREEN) | Organ | 1 u |
| Post-quantum hybrid key agreement (CN8) after CN7 | kx_pq_hybrid | Compose the estate's nx_pq_hybrid organ into the browser key agreement so the conversation key is an X25519-plus-PQ hybrid; done-rule: a keyx-vm-class gate proves the hybrid on the shipped wasm -- the watch flips by the gate, never by the symbol name | Organ | 1.5 u |
| Real NMT through the LLM serve (CN9) | ct_llm_translate | /connect/chat translation routes through the live LLM serve daemon with the lexicon as offline fallback; done-rule: a banked bilingual fixture set graded by an estate judge beats the lexicon on every pair, and the quality claim carries the judge output | Organ | 2 u |
| Live voice translation in calls (CN10) after CN9,CN1 | lt_call_caption | Captions in the listener's language rendered inside the call at conversational latency, composing CN9 and CN1; done-rule: a banked bilingual call fixture round-trips with judge-graded caption quality | Organ | 2 u |
| AI conversation-practice partner (CN11) after CN9 | cp_practice_turn | A consent-gated practice mode on the LLM serve whose corrections bind into the chat's correction loop; done-rule: practice turns graded by the judge panel against a banked rubric -- never by engagement time | Organ | 1.5 u |
| Federation probe (CN12) after CN7 | fed_route | A second Nishi CONNECT instance exchanges sealed messages with the first over the sovereign transport (self-federation first, standard bridges later); done-rule: cross-instance delivery proven with content-blind servers on both ends | Organ | 2 u |
Milestones
| Milestone | Rungs | Cumulative |
|---|---|---|
| M1 · A durable cohort on the wedge | CN5,CN6,CN3 | 5 u |
| M2 · Sealed, called, in a pocket | CN7,CN8,CN1,CN2 | 13.5 u |
| M3 · Learned and speaking | CN9,CN4,CN11 | 21 u |
| M4 · Everywhere | CN10,CN12 | 25 u |
Layer 3 · Engineering
How this is scored. Every Nishi mark is measured: the generator reads the real organ source on disk and requires the implementing symbol to exist (no self-grading). A watching tag names the organ and symbol contracted to close a gap — the mark flips itself on the next compare beat when that workstream ships, and the
comparewatch- plane row flips with it. The flip is necessary, not sufficient: it proves the symbol exists, never that the capability is good. The bar is the rung's pre-declared done-rule, proven by its gate — a symbol shipped without the behaviour behind it is a defect, and the flip is exactly what makes that defect visible instead of quiet. Competitor marks record documented capability presence — presence, not depth or scale. Adoption is measured too: every measured row carries where its organ stands on the estate's ladder (source → built → promoted → registered → invoked; libraries by importer reach minus validation importers; gates by the execution surfaces that run them). A row is fully adopted only at the top of its ladder; anything short is tagged partial with the exact remedy, so a build nobody promoted can no longer read as shipped. Census stamps: importers asof 1787849099, gate census asof 1787855507 (unix seconds; -1 = census absent).Capability matrix — measured against source
◉ leads / measured exceed● present◐ partial○ absent · click any capability for its evidence
| Capability | Nishi | Tandem | HelloTalk | Meetup | Discord | Signal | Matrix |
|---|---|---|---|---|---|---|---|
Reciprocal language-partner matchingMeasured:mx_inter_popc exists in runtime/_hdl_build/nx_connect_match_lib.nx, verified at emit. Harmonic-mean reciprocity (one-sided pair scores 0); Tandem defined the category at scale Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ◉ | ● | ○ | ○ | ○ | ○ |
Unified interest graph (language+hobby+faith, one model)Measured:gx_clamp100 exists in runtime/_hdl_build/nx_connect_graph_lib.nx, verified at emit. One meta-path graph across silos; Meetup=interest groups, Discord=topic servers, neither unifies with language and faith Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder). | ● | ○ | ○ | ◐ | ◐ | ○ | ○ |
Consented intent lanes (mutual-min escalation)Measured:ln_min exists in runtime/_hdl_build/nx_connect_lanes_lib.nx, verified at emit. Escalation = MIN of both opt-ins; incumbents have no intent model -- Tandem's is a policy sentence (not a dating app, cited) rather than a consent state machine [tandem-guidelines] Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Privacy-preserving age assurance (band only, no ID stored)Measured:hmix exists in runtime/_hdl_build/nx_connect_idage.nx, verified at emit. Issuer attests an age BAND, unlinkable pseudonyms -- the minimal-disclosure shape ISO/IEC 27566-1 (Dec 2025) and the EU age-verification app converge on (both cited); Discord's 2026 program is on-device face estimation or ID (cited); Signal and Matrix carry no age-assurance capability at all [whatsapp-u13] [discord-age] [eu-avapp] [iso27566] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ◐ | ◐ | ○ | ○ |
Structural adult-minor wall (two-deep, SERVES youth)Measured exceed:yw_may_channel in runtime/_hdl_build/nx_connect_youth_lib.nx, verified at emit. EXCEED KEPT after the 2026 re-grade: Discord went teen-by-default globally in Feb 2026 (cited, now Part) yet still permits adult-minor private DMs; HelloTalk segregates minor SEARCH only and Meetup is 18-plus exclusion (both cited); no rival enforces the visible-context two-adult rule (GH 20.7.1, cited) [discord-terms] [discord-teen] [snap-u16] [meetup-age] [hellotalk-minor] [church-gh20] Adoption: LIB-WIRED importers=4 nonval=4 — fully adopted (top of its ladder). | ◉ | ○ | ○ | ○ | ◐ | ○ | ○ |
Fail-closed mandatory CSAE reportingMeasured:sink_fails exists in runtime/_hdl_build/nx_connect_csae_report.nx, verified at emit. Ours refuses to proceed when the report sink fails; incumbent pipelines are best-effort duty-met (18 USC 2258A cited; NCMEC read 21.3 million reports in 2025 with enticement up 158 percent, cited) [usc-2258a] [ep-csar] [ncmec] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ◐ | ◐ | ◐ | ◐ |
Messaging core (ordered log, offline dedup, receipts, edit/delete)Measured:log_append exists in runtime/_hdl_build/nx_connect_msg.nx, verified at emit. Idempotent by client msg-id; delivery state machine; content-blind storage; the maturity gauge grades our depth STUB (in-memory demo) -- presence, not scale; rung CN6 Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ● | ● | ◐ | ● | ● | ● |
Message breadth (reactions, replies, forward, pins, search)Measured:react_toggle exists in runtime/_hdl_build/nx_connect_msgx.nx, verified at emit. Full-text search is client-side by content-blind design Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ○ | ● | ● | ● |
Media, voice notes + resumable large filesMeasured:blob_put exists in runtime/_hdl_build/nx_connect_media.nx, verified at emit. Content-addressed dedup; chunked + resumable for low bandwidth Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ● | ● | ○ | ● | ● | ● |
Inline in-chat translation (unlimited, free)Measured:ct_render_inline exists in runtime/_hdl_build/nx_connect_translate.nx, verified at emit. Unlimited BY CONSTRUCTION vs rationed rivals (Tandem Pro and HelloTalk VIP paywall unlimited translation, both cited) -- but the free field moved in 2025-26: WhatsApp ships free on-device translation and Apple ships on-device Live Translation (both cited), so free-inline is table stakes outside this column set; our QUALITY is lexicon-grade (gauge: STUB) and real NMT through the LLM serve is rung CN9 [apple-livetranslate] [tandem-overview] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◉ | ◉ | ○ | ○ | ○ | ○ |
In-chat correction learning loopMeasured:ct_rationed_translate exists in runtime/_hdl_build/nx_connect_translate.nx, verified at emit. Correction binds to the message, original preserved; HelloTalk correction is its signature (cited) Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ● | ◉ | ○ | ○ | ○ | ○ |
Real-world events + RSVP (capacity, idempotent)Measured:ev_rsvp exists in runtime/_hdl_build/nx_connect_events_lib.nx, verified at emit. Meetup is the category king and charges organizers (Starter caps one group, two events, ten attendees; Standard 29.99 USD per month -- both cited); ours adds the two-deep youth wall and zero fees [meetup-plans] [meetup-prices] [meetup-starter] [luma] Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ◐ | ◉ | ◐ | ○ | ○ |
Profile + moments feed + stories (additive tombstones)Measured:so_feed exists in runtime/_hdl_build/nx_connect_social.nx, verified at emit. HelloTalk Moments is core to it; Signal ships stories; Element has no feed surface; ours is faith-consent-gated (Art.9, cited) and looks-de-emphasized [gdpr-art9] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◉ | ◐ | ◐ | ◐ | ○ |
Consent-only discovery (handle/QR; no phonebook upload)Measured:so_add_by_token exists in runtime/_hdl_build/nx_connect_social.nx, verified at emit. NO phonebook-ingestion path exists in the schema; Signal still keys on phone numbers (private contact discovery plus usernames); Matrix is handle-based Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ○ | ◐ | ◐ | ● |
Typing/presence privacy + scheduled/silent sendMeasured:ty_active exists in runtime/_hdl_build/nx_connect_presence.nx, verified at emit. Typing is ephemeral by construction; last-seen has a coarse privacy mode Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ○ | ◐ | ● | ● |
E2E content-blind group video receive (SVC, server decodes 0)Measured:recv_bw_svc exists in runtime/_hdl_build/nx_connect_room_rx.nx, verified at emit. The parity bar moved: Discord DAVE is now UNIVERSAL -- every voice and video call E2E by default since March 2026 (cited); Signal group calls are E2E at 75 (cited); Element Call is E2E; ours is layout-aware SVC receive, gate-proven [discord-dave] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◉ | ● | ● |
E2E scale ceiling (MLS RFC9420 thousands; O(page) receive)Measured:log2_ceil exists in runtime/_hdl_build/nx_connect_room_scale_exceed.nx, verified at emit. EXCEED RETIRED 2026-08-19: MLS is the shipped norm now -- Discord DAVE universal, RCS UP3.0 MLS beta between iPhone and Android, Wire two-thousand-member groups GA, Webex 1000-participant meetings (all cited); ours remains a cited architectural model, not a deployment; product caps for context: Signal calls 75 and groups 1000; Telegram groups reach 200000 but are NOT E2E (secret chats only, FAQ cited -- the old note wrongly paired that number with E2E caps) [rfc9420] [signal-calls] [wire-mls] [webex-mls] [telegram-faq] [matrix-twim] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◉ | ◐ | ◐ |
Sovereign self-host + zero vendor metadataMeasured:max_arr exists in runtime/_hdl_build/nx_connect_room_exceed.nx, verified at emit. EXCEED RETIRED 2026-08-19: Matrix/Element self-hosts at national scale (Bundeswehr 100000-plus active users, cited), so self-hosting is no longer unique; what remains ours alone -- the whole stack from the assembler up on your own hardware, TLS to storage to build chain -- is carried as presence until it is measured against a peer, not asserted Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ○ | ◉ |
Zero paywalled connection features (incl unlimited translation)Measured:hx_find exists in runtime/_hdl_build/nx_connect_h2h_exceed.nx, verified at emit. EXCEED RETIRED 2026-08-19: Signal and Matrix are free (donation- and open-source-funded), so zero-paywall is shared with the lane leaders; the paid four remain cited from banked bytes -- Tandem Pro, HelloTalk VIP (unlimited-translation paywalls, both cited), Meetup organizer subscriptions (cited), Discord core free with Nitro extras [hellotalk-vip] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◐ | ● | ● |
Member-missionary reconnection (mission x area x time)Measured:rc_inter_popc exists in runtime/_hdl_build/nx_connect_lds_reconnect_lib.nx, verified at emit. No incumbent models service-era bonds -- the Church's own Member Tools shares mission-leader contacts one-way only (cited); consent-gated in both directions; live at /connect/reconnect Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Connection-quality funnel (replies/meetings, not time-on-app)Measured:show_by exists in runtime/_hdl_build/nx_connect_conn_quality.nx, verified at emit. Success metric = real connection outcomes; the 2026 IRL-first challengers (Timeleft, cited) validate the philosophy while the big incumbents still optimize engagement time [timeleft] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ◐ | ○ | ○ | ○ |
Content-blind abuse detection (no plaintext to server)Measured:abuse_score exists in runtime/_hdl_build/nx_connect_blind_abuse.nx, verified at emit. Behavioral and metadata signals only; Signal is content-blind by construction; the 2026 EU frame keeps E2E content out of scanning duties (EP resolution cited); most incumbents scan plaintext server-side Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◐ | ● | ◐ |
TOTP-class 2FA + single-use recovery + lockoutMeasured:fa_verify exists in runtime/_hdl_build/nx_connect_2fa.nx, verified at emit. Full state machine gated (window verify, lockout, recovery); OTP fn = named RFC-6238 drop-in on in-tree HMAC-SHA1 [rfc6238] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ● | ● | ● | ● | ● | ● |
Contextual brought-to-you-by ads (minor-walled, faith-blind)Measured:ca_should_serve exists in runtime/_hdl_build/nx_connect_ads.nx, verified at emit. Composes the honest-ad engine: only signals are shown-flag + coarse geo; zero ads to minors fail-closed; incumbents run behavioral targeting or none Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Group chat + broadcast channels (roles by construction)Measured:grp_can_post exists in runtime/_hdl_build/nx_connect_group_lib.nx, verified at emit. OWNER over ADMIN over MEMBER with no admin coup; a minor is never admitted to a DATE-lane group; Discord roles are the category best; live at /connect/community Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ● | ◐ | ◉ | ● | ● |
Polls + quizzes (one voter one ballot, revote replaces)Measured:pl_vote exists in runtime/_hdl_build/nx_connect_polls_lib.nx, verified at emit. Anonymous mode reports aggregates only; quiz scores reveal after close; Discord ships native polls (cited); Signal polls were reported in 2026 press but are unconfirmed on a primary page, so Signal codes No with the uncertainty stated rather than guessed; live at /connect/community [discord-polls] Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ● | ○ | ● |
Ward and branch community boundary (community, never administration)Measured:wd_forbidden_count exists in runtime/_hdl_build/nx_connect_wards_lib.nx, verified at emit. A field registry REFUSES every congregation-admin class (calling, record, attendance, ordinance, donation) -- the deliberate complement of the Church's own Member Tools admin tooling (cited); faith consent (Art.9) required; live at /connect/community [church-membertools] Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Youth game and hangout rooms (two-deep on join AND leave)Measured:room_admit exists in runtime/_hdl_build/nx_connect_lds_room.nx, verified at emit. Admission drives a REAL relay room; a youth room is safe only while it carries two-plus adults, enforced on join and on leave; the norm is the published GH 20.7.1 (cited) Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◐ | ○ | ○ |
Call session signaling (state machine, no cold-call, block honored)Measured:call_initiate exists in runtime/_hdl_build/nx_connect_call.nx, verified at emit. Valid transitions only; only the callee accepts, only the caller cancels; you cannot call a non-contact or through a block; the media plane is the codec watch row (rung CN1) Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ● | ● | ○ | ◉ | ● | ● |
Video-room media pipeline (SVC layers, NACK+AIMD, active speaker)Measured:cc_on_loss exists in runtime/_hdl_build/nx_connect_transport.nx, verified at emit. Send-side SVC encode with per-layer encrypt and pacing, offset-addressed reassembly with NACK, loss-driven rate feeding layer selection, speaker detection from level metadata only; integer models proven in gates, NOT composed into live calls -- rung CN1 Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ◐ | ◐ | ○ | ◉ | ● | ● |
E2E group keying (MLS-style sender-key ratchet)Measured:ratchet exists in runtime/_hdl_build/nx_connect_groupkey.nx, verified at emit. Forward secrecy proven, a removed member cannot derive the next epoch, the server holds zero key material; a key-SCHEDULE model whose production primitive is the ecosystem HKDF -- Discord and Signal ship the real thing (both cited) Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ◉ | ◉ | ● |
Authenticated message sealing (ChaCha20-Poly1305 AEAD, RFC 8439)Measured:cseal_open exists in runtime/nx_connect_seal.nx, verified at emit. Tamper is REJECTED, the nonce is a per-message counter, the sequence is the AAD (RFC 8439 cited); retires the additive stand-in the gauge graded STUB; gate-proven, wiring into the live serve is rung CN7; Discord text chat is NOT E2E (no current plans, cited) [rfc8439] Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program. | ● | ○ | ○ | ○ | ○ | ◉ | ● |
In-browser E2E client (X25519 agreement on the shipped wasm)Measured:ce_emit_html exists in runtime/nx_connect_e2e_client.nx, verified at emit. RFC 7748 section 6.1 Diffie-Hellman proven ON THE SHIPPED WASM in the sovereign VM (keyx gate 5 of 5, RFC cited); seal in the sender's browser, POST only ciphertext, decrypt in the recipient's; live at /connect/secure; Signal's PQXDH-plus-SPQR is the depth bar (its own watch row) [rfc7748] Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ● | ◉ | ● |
Data-on-the-endpoint device vault (history never on our server)Measured:cd_emit_html exists in runtime/nx_connect_device_client.nx, verified at emit. Contacts and full message history live in the user's browser, ChaCha20-encrypted at rest; only a public key and ciphertext ever leave the device; honest scope: localStorage store, and the directory TOFU is closed by the pubkey-binding row Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ◉ | ◐ |
Identity-bound public-key directory (TOFU closed)Measured:cs_sh_pub_put2 exists in runtime/_hdl_build/nx_connect_serve.nx, verified at emit. Once a handle is verified under an account, no other account and no anonymous caller can substitute a key -- proven through the live /connect/pubkey route and across boot replay; Signal shipped automatic key verification in Aug 2026 (cited), the same property at production depth Adoption: LIB-WIRED importers=4 nonval=1 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ● | ◉ | ● |
Passwordless-at-rest login (OPAQUE aPAKE, RFC 9807)Measured:cs_page_login exists in runtime/_hdl_build/nx_connect_serve.nx, verified at emit. Register, login, whoami over an argon2id KSF and Ed25519 sessions; the server stores an envelope, never a password-equivalent (RFC 9807 cited); wrong passphrase and unknown handle proven REJECTED by the auth gate; live at /connect/login [rfc9807] Adoption: LIB-WIRED importers=4 nonval=1 — fully adopted (top of its ladder). | ● | ● | ● | ● | ● | ● | ● |
Per-account persistent isolated worldsMeasured:acc_save exists in runtime/_hdl_build/nx_connect_accounts.nx, verified at emit. Atomic tmp-plus-rename snapshots survive restart, accounts are isolated by construction, a tampered snapshot is rejected fail-closed; plus a bounded per-account contact list Adoption: LIB-WIRED importers=4 nonval=1 — fully adopted (top of its ladder). | ● | ● | ● | ● | ● | ● | ● |
Shared albums on relationship-based accessMeasured:al_do exists in runtime/_hdl_build/nx_connect_album.nx, verified at emit. One ReBAC permission plane answers every share question; a signed-out caller cannot mutate anything (gate tooth T3) Adoption: LIB-WIRED importers=3 nonval=1 — fully adopted (top of its ladder). | ● | ◐ | ◐ | ◐ | ◐ | ◐ | ◐ |
Agent-ready API front door (every engine a pure verb)Measured:ca_dispatch exists in runtime/_hdl_build/nx_connect_api_lib.nx, verified at emit. All eight gated engines behind one stateless dispatcher emitting versioned JSON, registered on the MCP surface as nx_connect; Discord and Matrix have first-class public APIs, Meetup a partial one Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder). | ● | ○ | ○ | ◐ | ◉ | ○ | ◉ |
Zero-JS accessible app shell (ADA by construction)Measured:cu_tab exists in runtime/_hdl_build/nx_connect_ui.nx, verified at emit. Token-SSOT design system, aria-current navigation, zero external assets, renders without JavaScript; the E2E client is the one accepted JS last-mile Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder). | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Censorship-resistant + gracefully degrading transportMeasured:distinct_bytes exists in runtime/_hdl_build/nx_connect_censor_transport.nx, verified at emit. No static wire signature for DPI to match -- measured against an in-gate DPI model, not a live censor, and said so; ordered fallback (direct, TLS-fallback, relay, store-and-forward) always delivers; Signal ships censorship circumvention, Matrix has P2P research Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ● | ◐ |
Data-light wire for low-bandwidth regionsMeasured:dl_envelope_bytes exists in runtime/_hdl_build/nx_connect_datalight.nx, verified at emit. Fixed 34-byte envelope, delta sync, one-round-trip catch-up, text-first media references; architecture-level byte accounting -- no live-network head-to-head claimed Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ● | ● |
Fair exposure ranking + honest match framingMeasured:gini_permil exists in runtime/_hdl_build/nx_connect_fair_rank.nx, verified at emit. Exposure-fair re-ranker audited by an integer Gini (must halve popularity concentration at 70-plus percent retained relevance); NO unfalsifiable compatibility score exists in the output schema by construction Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it. | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Production A/V codec substrate composed into callsOpen — watchingruntime/nx_connect_codec.nx : cc_call_codec_bind, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Honest gap: the sovereign vcodec is a separate proven arc, not yet composed into CONNECT calls -- rung CN1 names the bind contract | ○ | ● | ● | ○ | ◉ | ◉ | ● |
Deployed clients at scale (polished mobile/web apps)Open — watchingruntime/nx_connect_client.nx : cl_mobile_shell, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Honest gap: incumbents ship native apps to millions; ours = the live interactive web app PUBLIC at nishifamily.com/connect (gate 8 of 8, GET and POST verified over the edge) -- native mobile is rung CN2 | ○ | ◉ | ◉ | ◉ | ◉ | ◉ | ◉ |
Network liquidity (installed user base)Open — watchingruntime/nx_connect_liquidity.nx : lq_cohort_seed, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Honest gap: 0 real users (the gauge says so); cold-start vs incumbent scale; the wedge strategy is the LDS community vertical -- rung CN3 names the cohort-seeding contract | ○ | ◉ | ◉ | ◉ | ◉ | ◉ | ● |
Trained neural matching + moderation modelsOpen — watchingruntime/nx_connect_neural.nx : nn_match_train, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Honest gap: the no-float trained-model thread is the named unlock (rung CN4, with a pre-declared accept rule); Signal does no trained content moderation by design, which is a stance, not an absence of capability engineering | ○ | ◐ | ◐ | ◐ | ◉ | ○ | ○ |
AI conversation-practice partnerOpen — watchingruntime/nx_connect_ai_partner.nx : cp_practice_turn, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. NEW WATCH 2026-08-19: the 2026 bar sits outside this column set -- Duolingo moved AI video-call practice into its mainstream tier and Google Translate ships a free practice beta (both cited); in-column, Tandem's AI Toolkit is Part and HelloTalk's AI aids are Yes (cited); the estate's LLM serve daemon is the named substrate -- rung CN11 [google-practice] | ○ | ◐ | ● | ○ | ○ | ○ | ○ |
Live voice translation inside callsOpen — watchingruntime/nx_connect_live_translate.nx : lt_call_caption, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. NEW WATCH 2026-08-19: none of the six columns ships it either -- the field bar is Apple's on-device Live Translation in calls and Google's Gemini speech-to-speech at 70-plus languages (both cited); lands after rungs CN9 and CN1 -- rung CN10 [google-livetranslate] | ○ | ○ | ○ | ○ | ○ | ○ | ○ |
Post-quantum hybrid key agreementOpen — watchingruntime/nx_connect_pq.nx : kx_pq_hybrid, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. NEW WATCH 2026-08-19: Signal's SPQR triple ratchet is rolling out (cited) and iMessage ships PQ3; the estate already holds nx_pq_hybrid and its gate -- the contract is composing it into the CONNECT key agreement, rung CN8 | ○ | ○ | ○ | ○ | ○ | ◉ | ○ |
Push notifications + real presence at scaleOpen — watchingruntime/nx_connect_push.nx : push_deliver, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. NEW WATCH 2026-08-19: the gauge grades this ABSENT while every rival ships it; delivery lands inside the mobile-shell rung CN2 | ○ | ● | ● | ● | ● | ● | ● |
Federation and third-party E2E interopOpen — watchingruntime/nx_connect_federation.nx : fed_route, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. NEW WATCH 2026-08-19: the 2026 shift -- RCS UP3.0 gives iPhone-Android interoperable E2EE and the GSMA standard behind it is published (both cited); Matrix IS federation, coded Best; rung CN12 [gsma-rcs] | ○ | ○ | ○ | ○ | ○ | ○ | ◉ |
Risk register
| Risk | Likelihood x impact | Mitigation |
|---|---|---|
| A native shell that bypasses the web core forks the safety architecture | possible x high | CN2 done-rule runs the same gate teeth through the shell; the wall is in the core, not the client. |
| A trained moderation model that sees plaintext destroys the content-blind stance | possible x high | CN4 trains on metadata and behavioral signals only by declaration; a plaintext feature is a gate RED. |
| A cohort invited before the durable store loses its first week of messages | likely x high | CN3 now depends on CN6; the store precedes the invite by construction. |
On these two registers. Rows are declared in the domain's plan file and carry the debt id, which is the join key back to the sovereign debt plane — that plane, not this page, is the authority on state. Reconciling them automatically (the regen reading the plane and refreshing these rows) is a named, owed rung; until it lands, treat an id here as a pointer to look up, not a status to trust.
Honest verdict. The coverage above is capability presence measured against source — not depth, scale, or polish, where mature rivals may lead. Exceeds are claimed only where a mechanism backs them. Every open gap is a watch contract: it names the organ and symbol that closes it, and this page flips the cell itself when that workstream ships.
Person · product · place — not yet measured for this domain
Every compare carries this layer. Declare
knowledge/compare/connect.ppp (rows surface|nishi or c1..c4|label|url|connect naming OUR live surface and each rival's front door), run nx_ppp_probe domain connect, and this section fills itself on the next beat: the same ruler on both sides — privacy and CX (third-party hosts, tracker classes, cookies, security headers), design and longevity (design hygiene, computed WCAG contrast, render-blocking resources, unsized media, script weight, theme and motion queries), findability (landmarks, skip link, on-site search, breadcrumb, headings, internal links).References
Beyond a link list. Every reference below resolves twice — the publisher's copy and, where banked, the estate's own non-rottable library mirror with a content pin — and carries its evidence class plus the exact claim on this page it grounds. Keyed marks like [key] in the matrix notes jump here. A dash means honestly absent, never assumed.
- [tandem] Tandem. Tandem Language Exchange App -- find conversation exchange partners; FAQ on the page: Tandem is free to use, and Tandem Pro is a premium subscription offering unlimited translations, profile visitor insights, advanced search filters and an ad-free experience. Vendor page. publisher · read in our library
knowledge/fetched/cmp_connect_tandem.html· pinh5b678043305e296087286752697a787bcfd6a4f6525359ea8b9117c7e4fae4b9· accessed 2026-08-20 · vendor-docGrounds: The Tandem column: Best on "Reciprocal language-partner matching" (Tandem defined the category at scale) and the "Zero paywalled connection features (incl unlimited translation)" row -- the vendor's own FAQ states unlimited translation sits behind Tandem Pro, which is what the row's zero-paywall grade is measured against. - [hellotalk] HelloTalk. Learn Languages with Native Speakers -- connect with 70M+ language learners, practice 260+ languages (page description); built-in aids for translation, pronunciation, transliteration and corrections; the correction feature lets learners receive instant feedback from native speakers. Vendor page. publisher · read in our library
knowledge/fetched/cmp_connect_hellotalk.html· pinh67ebbb25ccc4f2d8d8f7407946397202220e6e67a49e9b3f06dd9082e71d25c1· accessed 2026-08-18 · vendor-docGrounds: The HelloTalk column: Best on "In-chat correction learning loop" (the note: HelloTalk correction is its signature), "Inline in-chat translation" and "Profile + moments feed" (Moments is core to it) -- the vendor page names corrections, translation and Moments as its features, which is what those Best codes describe. - [meetup-plans] Meetup Help Center. Can I switch from a paid plan to a cheaper or free plan to organize groups on Meetup? -- organizer subscriptions are Standard or Pro (paid); the free Starter plan is only for first-time organizers and includes one group, two events per month and a 10-person limit per event. publisher · read in our library
knowledge/fetched/cmp_connect_meetup_plans.html· pinh5b45d5540889e24340a5ead9c0967c75f609e304ab0b6e3ad6b2182f55eb3633· accessed 2026-08-18 · vendor-docGrounds: The Meetup column: Best on "Real-world events + RSVP" (the category king) and the "Zero paywalled connection features" row -- the help center states organizing beyond the Starter limits is a paid subscription, which is the fee the row's zero-fee grade is measured against (the exact monthly price is on the prices page cited separately). - [discord-dave] Discord. Meet DAVE: Discord's New End-to-End Encryption for Audio and Video (Discord blog) -- E2EE for voice and video calls using Messaging Layer Security (RFC 9420) for group key exchange, per-sender media keys, an SFU that cannot decrypt media, and an epoch-authenticator Voice Privacy Code. publisher · read in our library
knowledge/fetched/cmp_connect_discord_dave.html· pinh87d903549189a1f79746c7373b2daaceb1e153d9529d462c9511bb4215926f5a· accessed 2026-08-18 · vendor-docGrounds: The "E2E content-blind group video receive (SVC, server decodes 0)" row: Discord DAVE is the parity bar the row names and codes Best for Discord; the same page states DAVE is built on MLS, which is why the "E2E scale ceiling" row cites RFC 9420 as the shared architectural ground. - [discord-terms] Discord. Terms of Service -- age requirements: by accessing the services you confirm you are at least 13 years old and meet the minimum age required by the laws in your country; the services are not directed at users under 13. publisher · read in our library
knowledge/fetched/cmp_connect_discord_terms.html· pinhf4199c0c5a5534da11975604d617f3cd7b37d6983a8fcd6a115e764855586672· accessed 2026-08-18 · vendor-docGrounds: The "Structural adult-minor wall (two-deep, SERVES youth)" exceed row note ("Discord admits 13 up"): the vendor's own terms set the 13-plus admission, against which the two-deep youth wall is the differentiator; the row's grooming-problem clause is grounded separately by the banked bytes named in the matrix, not by this reference. - [rfc9420] Barnes, R., Beurdouche, B., Robert, R., Millican, J., Omara, E., Cohn-Gordon, K. RFC 9420: The Messaging Layer Security (MLS) Protocol. IETF, July 2023. publisher · read in our library
knowledge/fetched/cmp_connect_rfc9420.html· pinh158ab3ce6241c8bb8516bebe57a27d316846d34e62099d6feab2992a90110827· accessed 2026-08-18 · published-standardGrounds: The "E2E scale ceiling (MLS RFC9420 thousands; O(page) receive)" row: the logarithmic group-key tree that lets a group scale to thousands is this protocol, and the row is honest that ours is a cited architectural model while the 2026 field ships this protocol in production. - [rfc6238] M'Raihi, D., Machani, S., Pei, M., Rydell, J. RFC 6238: TOTP: Time-Based One-Time Password Algorithm. IETF, May 2011. publisher · read in our library
knowledge/fetched/cmp_connect_rfc6238.html· pinh3913d8c109d2193e9dec319cacd8712b6423af5cc027b766c15081a3255f1c91· accessed 2026-08-18 · published-standardGrounds: The "TOTP-class 2FA + single-use recovery + lockout" row: the OTP function is a named RFC-6238 drop-in on the in-tree HMAC-SHA1 (the estate's totp extvec gate verifies it against this RFC's test vectors), so the row's Yes across all columns has one published definition. - [gdpr-art9] Regulation (EU) 2016/679 (GDPR), Article 9 -- Processing of special categories of personal data (religious or philosophical beliefs among the prohibited categories absent explicit consent or another listed basis); consolidated text as mirrored by gdpr-info.eu. publisher · read in our library
knowledge/fetched/cmp_connect_gdpr_art9.html· pinhe9160b005e4734223ff71f65ec3e6d30ed9f690d085502ef87109cc77c07fcc6· accessed 2026-08-18 · published-standardGrounds: The "Profile + moments feed + stories" row note ("faith-consent-gated (Art.9)") and the "Contextual brought-to-you-by ads (minor-walled, faith-blind)" row: faith is an Article 9 special category, which is why the schema gates it on explicit consent and the ad engine is faith-blind by construction. - [usc-2258a] United States Code, Title 18, Section 2258A -- Reporting requirements of providers (mandatory reporting of apparent child sexual exploitation to the NCMEC CyberTipline). Legal Information Institute, Cornell. publisher · read in our library
knowledge/fetched/cmp_connect_usc2258a.html· pinh373447aab6e8264f653e833cd90f2fbde5eabd017e503606312f3421f310892d· accessed 2026-08-18 · published-standardGrounds: The "Fail-closed mandatory CSAE reporting" row: the mandatory-report duty on providers is this statute; ours refuses to proceed when the report sink fails (sink_fails), whereas the incumbents' pipelines are best-effort -- the row's Part codes reflect a duty met, not a fail-closed guarantee. - [signal-spqr] Signal blog. SPQR -- the Sparse Post-Quantum Ratchet joins the Double Ratchet as a Triple Ratchet, so eventually all conversations move to the new protocol without user action. Signal, 2 Oct 2025. publisher · read in our library
knowledge/fetched/cmp_connect_signal_spqr.html· pinh8c585add8e569e52c05086f44137e841f0393fce904318e20830788f5a6c3ade· accessed 2026-08-18 · vendor-docGrounds: The "Post-quantum hybrid key agreement" watch row: Signal is coded Best because SPQR is rolling out in production while our PQ composition is an open contract. - [signal-akv] Signal blog. Automatic key verification -- key transparency that complements safety numbers, with external auditors. Signal, 11 Aug 2026. publisher · read in our library
knowledge/fetched/cmp_connect_signal_akv.html· pinh8a6a5bf14f3b9e23204a0eae47caccf5a10f09145650d58a7e9f7175e896329f· accessed 2026-08-18 · vendor-docGrounds: The "Identity-bound public-key directory (TOFU closed)" row: Signal shipped the same property at depth this month, which is why Signal codes Best beside our gate-proven binding. - [signal-calls] Signal blog. Call links post, carrying the 2026 update that group calls are supported for up to 75 people. publisher · read in our library
knowledge/fetched/cmp_connect_signal_calllinks.html· pinh06a3b50f5346daed149f6a560665afc814400478d006f1ff7c76b050828f71c6· accessed 2026-08-18 · vendor-docGrounds: The "E2E scale ceiling" row note: the Signal-calls-75 product cap is quoted from this page, replacing the old note's unsourced pairing of that number with Telegram's group cap. - [whatsapp-translate] WhatsApp blog. Introducing message translations -- translations occur on the device where WhatsApp cannot see them; six languages on Android and 19 plus on iPhone at launch, free. 23 Sep 2025. publisher · read in our library
knowledge/fetched/cmp_connect_whatsapp_translate.html· pinh7df51ba944b7f5c91399ce1968b6c15b1fa0b751e17b14f1d717d90c84660d06· accessed 2026-08-18 · vendor-docGrounds: The "Inline in-chat translation (unlimited, free)" row note: free on-device translation shipped by a 3-billion-user messenger is what moved the field, so unlimited-free inline translation is no longer an exceed for anyone. - [whatsapp-u13] WhatsApp blog. Introducing parent-managed accounts on WhatsApp -- accounts a parent or guardian sets up for pre-teens, messaging and calling only, still end-to-end encrypted. 11 Mar 2026. publisher · read in our library
knowledge/fetched/cmp_connect_whatsapp_u13.html· pinhe4aac6845c0d0a4708781d0117a06b14a3e0dd740d220225ba9cacb86a42f3bb· accessed 2026-08-18 · vendor-docGrounds: The "Privacy-preserving age assurance (band only, no ID stored)" row: the strongest incumbent under-13 approach of 2026, a guardianship model rather than a band attestation, which the row's Part codes describe. - [discord-dave-all] Discord blog. Every voice and video call on Discord is now end-to-end encrypted -- DMs, group DMs, voice channels and Go Live streams, by default, with no current plans to extend E2EE to text messages. 18 May 2026. publisher · read in our library
knowledge/fetched/cmp_connect_discord_dave_all.html· pinheec9c7df775b0e582df47c87af845dcb00312e30133518f91a832c3cdd86b2bd· accessed 2026-08-18 · vendor-docGrounds: The "E2E content-blind group video receive" row (DAVE went universal, the parity bar moved) and the "Authenticated message sealing" row (Discord text staying non-E2E is why Discord codes No there); also the retirement ground for the old E2E-scale exceed. - [discord-teen] Discord press release. Discord launches teen-by-default settings globally -- all new and existing users worldwide get a teen-appropriate experience; only age-assured adults reach age-restricted spaces. 9 Feb 2026. publisher · read in our library
knowledge/fetched/cmp_connect_discord_teen.html· pinh097a996931598e8bd6d5e562bebe945166accc294400c35f147ddabfe45f373a· accessed 2026-08-18 · vendor-docGrounds: The "Structural adult-minor wall (two-deep, SERVES youth)" exceed row: Discord's 2026 posture upgrades its column to Part, and the exceed survives because teen-by-default still permits adult-minor private DMs with no visible-context two-adult rule. - [discord-age] Discord blog. Getting global age assurance right -- the global rollout is delayed to the second half of 2026, and any partner offering facial age estimation must perform it entirely on-device. 24 Feb 2026. publisher · read in our library
knowledge/fetched/cmp_connect_discord_age.html· pinh900f459ae3ed614d5f23dca436071cfcddafeba8544a46398c7b9fc071f52594· accessed 2026-08-18 · vendor-docGrounds: The "Privacy-preserving age assurance (band only, no ID stored)" row: Discord's 2026 method set (on-device face estimation or ID) against which the band-only no-ID design is graded. - [discord-polls] Discord support. Polls FAQ -- native polls with up to 10 answers and up to a week duration. Accessed 2026-08-18. publisher · read in our library
knowledge/fetched/cmp_connect_discord_polls.html· pinhff0ed16a30d302c8fbbdf0d0705a64cf4545a521e1a672578128a02c2eed9464· accessed 2026-08-18 · vendor-docGrounds: The "Polls + quizzes (one voter one ballot, revote replaces)" row: the Discord Yes. - [apple-rcs] Apple Newsroom. End-to-end encrypted RCS messaging begins rolling out today in beta -- iOS 26.5 with the latest Google Messages on supported carriers, encryption on by default. 11 May 2026. publisher · read in our library
knowledge/fetched/cmp_connect_apple_rcs.html· pinhd68f2cde5738f5582505fb2f6c98efee9e922bc4af75c0ba9ca24d71f6cb4db8· accessed 2026-08-18 · vendor-docGrounds: The "E2E scale ceiling" row (MLS shipped cross-vendor, retiring the exceed) and the "Federation and third-party E2E interop" watch row: iPhone-Android interoperable E2EE is the 2026 shift the watch names. - [apple-livetranslate] Apple Newsroom. New Apple Intelligence features are available today -- Live Translation in Messages, FaceTime and Phone runs entirely on device. 15 Sep 2025. publisher · read in our library
knowledge/fetched/cmp_connect_apple_livetranslate.html· pinh7a54508249746c6e649daa5e75638105df5eedb76bf87c366231cd5405799cde· accessed 2026-08-18 · vendor-docGrounds: The "Inline in-chat translation" row note (on-device translation as table stakes) and the "Live voice translation inside calls" watch row: the on-device field bar. - [gsma-rcs] GSMA. RCS encryption -- a leap towards secure and interoperable messaging: RCS becomes the first large-scale messaging service to support interoperable E2EE between client implementations from different providers, built on MLS. 14 Mar 2025. publisher · read in our library
knowledge/fetched/cmp_connect_gsma_rcs.html· pinh540ea147ebdbb20778d6da067969341b2b5a80ca5ea3f14f118be7398a76c60e· accessed 2026-08-18 · vendor-docGrounds: The "Federation and third-party E2E interop" watch row: the published standard behind the cross-vendor shift. - [wire-mls] Wire blog. Wire MLS is now generally available -- the GA release has been tested to support up to two thousand group members, each with up to eight devices. April 2025. publisher · read in our library
knowledge/fetched/cmp_connect_wire_mls.html· pinhca8f68fecf942edc975aa30b904ee8a2516d55a17a7b01ff158faf00fb22a2aa· accessed 2026-08-18 · vendor-docGrounds: The "E2E scale ceiling" row: a shipped MLS deployment at the thousands scale our model cites, part of why the exceed retired. - [webex-mls] Webex Help Center. End-to-end encryption with identity verification for Webex meetings -- zero-trust E2EE using MLS, up to 1000 participants. Updated 13 Jul 2026. publisher · read in our library
knowledge/fetched/cmp_connect_webex_mls.html· pinhf79c6a5889185846c4f3ec21bd29d641c5ad8ec33c95e31710d265ad47d0ec00· accessed 2026-08-18 · vendor-docGrounds: The "E2E scale ceiling" row: a second shipped MLS deployment at four-digit scale. - [element-bundeswehr] Element case study. Bundeswehr -- with more than 100000 active users, secure open source messaging on Matrix is the real-time communications standard of the German Armed Forces. Accessed 2026-08-18. publisher · read in our library
knowledge/fetched/cmp_connect_element_bundeswehr.html· pinhc2e47623cde9a3d2f17adda220c207293a0c7a7f250d68911d75fe8b76877f3b· accessed 2026-08-18 · vendor-docGrounds: The "Sovereign self-host + zero vendor metadata" row: self-hosted secure messaging ships at national scale, which is why Matrix codes Best there and the old exceed retired. - [matrix-twim] Matrix.org blog. This Week in Matrix, 14 Aug 2026 -- the Spec Core Team continues to focus on Matrix 2.0 MSCs with an aim of cutting the release soon. publisher · read in our library
knowledge/fetched/cmp_connect_matrix_twim.html· pinh06f6ff4be6f2e9e44d3a84c60d3bd1b838a79b6b92d238fc3e432581722b2430· accessed 2026-08-18 · vendor-docGrounds: The Matrix column baseline: Matrix 2.0 is still uncut and MLS-in-Matrix remains research as of this issue, which grounds the Part codes on the Matrix E2E rows. - [telegram-faq] Telegram FAQ. Groups can hold up to 200000 members; server-client encryption is used in cloud chats, and only Secret Chats add client-client encryption. Accessed 2026-08-18. publisher · read in our library
knowledge/fetched/cmp_connect_telegram_faq.html· pinha77362d4d46479b8e3535953641b8771d6069f1b3645240a4c38fc691eb259cf· accessed 2026-08-18 · vendor-docGrounds: The "E2E scale ceiling" row note correction: Telegram's 200000 is a group-size cap, not an E2E cap -- its groups are not end-to-end encrypted at all, which the old note conflated. - [ep-csar] European Parliament press release. Child sexual abuse online -- Parliament supports extending the voluntary-detection rules until 3 August 2027 and states voluntary measures should not apply to end-to-end encrypted communications. 11 Mar 2026. publisher · read in our library
knowledge/fetched/cmp_connect_ep_csar.html· pinhb934ded57b1bec39e8677d321e2f43bc2a9dbff57b4767873daa200dcb41817f· accessed 2026-08-18 · published-standardGrounds: The "Fail-closed mandatory CSAE reporting" and "Content-blind abuse detection" rows: the 2026 EU frame keeps E2E content out of scanning duties, which is the legal ground under content-blind behavioral detection. - [snap-u16] Snap Newsroom. A friends-only way to create and share for Snapchatters under 16, with an optional, safeguarded introduction to public sharing at 16-17. 10 Jun 2026. publisher · read in our library
knowledge/fetched/cmp_connect_snap_u16.html· pinh708aeaf6abb575610eb5526271fadf296cd14011506ffa6b61578406c818c4c3· accessed 2026-08-18 · vendor-docGrounds: The "Structural adult-minor wall (two-deep, SERVES youth)" exceed row: the strongest minor-default outside the column set in 2026, still a visibility default rather than a structural two-adult rule. - [eu-avapp] European Commission news. Commission urges fast rollout of the EU age verification app -- member states should accelerate deployment by the end of 2026 so users can prove their age without sharing unnecessary personal data. 29 Apr 2026. publisher · read in our library
knowledge/fetched/cmp_connect_eu_avapp.html· pinhd0b285a50f52d5a54fc3493a488d58f04fc911debc57fef94cc75362997f0789· accessed 2026-08-18 · published-standardGrounds: The "Privacy-preserving age assurance (band only, no ID stored)" row: the EU blueprint converges on exactly the minimal-disclosure shape the band-only design implements. - [iso27566] ISO/IEC 27566-1:2025. Information security, cybersecurity and privacy protection -- age assurance systems, part 1: framework. Published December 2025 and made freely available. publisher · read in our library
knowledge/fetched/cmp_connect_iso27566.html· pinh35744b70b3ccead47b8cb5fe4f42e59d4a4ab6d876ef76715d6a67dbbc967146· accessed 2026-08-18 · published-standardGrounds: The "Privacy-preserving age assurance (band only, no ID stored)" row: the published framework the band attestation aligns to. - [meetup-prices] Meetup Help Center. Organizer subscription prices overview -- Standard 29.99 USD per month, Pro from 47 USD per group per month on longer terms. Accessed 2026-08-18. publisher · read in our library
knowledge/fetched/cmp_connect_meetup_prices.html· pinh17323dad20662f25a6cfba230ed2578e37f66bc56cae7e0825d58d6a0dae66c1· accessed 2026-08-18 · vendor-docGrounds: The "Real-world events + RSVP" and "Zero paywalled connection features" rows: the organizer fees the zero-fee note quotes.
generated by nx_swcompare_matrix (sovereign NishiLang organ) from knowledge/compare/connect.matrix · every Nishi cell verified against organ source at emit time · watch cells re-measured on every compare beat · zero JS, zero trackers