Sovereign Recovery
Self-custody fails in one direction: the person who holds everything can lose everything. Sovereign Recovery makes recovery possible without making custody the price of it — the secret is split across people and devices you choose, and no share, including ours, is ever enough on its own.
The ten layers
The recovery phrase is split into shares distributed to guardians you name, with a threshold set by you: any T of N can restore it and any T−1 learn nothing at all. Losing a guardian is survivable by design, which is the difference between a recovery scheme and a second thing to lose.
A share is sealed to that guardian’s hybrid public key — X25519 combined with ML-KEM-768 — so a guardian holds something only they can open, and an adversary who records the traffic today cannot open it once a quantum computer exists. The guardians never see each other’s shares and never see the phrase.
Not held offline, not held in escrow, not held for emergencies. A recovery path that ends at the company that wrote the software is custody wearing a friendlier word, and it is the single failure that every seized, frozen or abandoned platform has in common. If we could restore your assets, so could anyone who compelled us.
The design extends the same split-and-threshold model to credentials, encrypted archives, a Vigi Passport, an agent identity and enterprise infrastructure. Today it protects a wallet; the parts that generalise it beyond the wallet are specified and not yet written, and this page will say so until they are.
Sovereign post-quantum network for verified value.
Post-quantum cryptographic security software: a sovereign network that strengthens custody, settlement and identity. Testnet active; mainnet opens when independent validation supports it. Ten layers, each with its own page and its real state on it: four running, six still a design.
