eleven / messenger Public

status: roadmap — move shipped work (tamper-evidence, self-hosting) out of "After V1" (#1207)

Two "After V1" cards described work that's already shipped and fleet-live:

- Tamper-evident verification (signed checkpoints, /integrity chain check,
  fork detection, inclusion-proof sampling, key transparency) is live on web,
  Mac and iPhone (#752/#775/#807/#808/#813/#789/#833). Members can verify the
  record hasn't been altered TODAY — folded into the "Trust you can check"
  track. The genuinely-future part (a public witness log for non-members)
  stays as "Provable to anyone, not just members".
- Self-hosting via a one-command installer shipped 2026-07-08 (#431/#433,
  released to all channels). New "Run it yourself" live track. Only the
  provider marketplace (#575) remains future → "A network of independent hosts".

Resilience at scale (multi-provider federation, #991/#993/#994) stays After V1
— genuinely open.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Paul Campbell b86f81f5bcb762be94d1a98dee4d5aa9f58f310d parent cf6e27f
1 file changed, +23 −10
  • web/status/roadmap.html +23 −10
diff --git a/web/status/roadmap.html b/web/status/roadmap.html
index 520bd66..51a831e 100644
--- a/web/status/roadmap.html
+++ b/web/status/roadmap.html
@@ -175,12 +175,23 @@
doesn't mean starting from an empty room. Opt-in, like the rest of the extras.</p>
</li>
+ <li class="track">
+ <div class="track-head"><h2>Run it yourself</h2><span class="pill live">Live</span></div>
+ <p class="detail">Self-host Eleven on your own machine — available now.</p>
+ <p>A single command sets up your own server (Linux, on Intel or ARM), with an
+ honest guide to what it takes. The part still ahead is letting people who host
+ offer that capacity to others — an open network of providers (see below).</p>
+ </li>
+
<li class="track">
<div class="track-head"><h2>Trust you can check</h2><span class="pill building">Ongoing</span></div>
<p class="detail">The promises kept, and kept in the open.</p>
- <p>Accessibility to the WCAG&nbsp;2.2&nbsp;AA standard on every surface, moderation
- tools for the people who run spaces, and the trust posture behind the encryption
- held to. The <a href="./security.html">security ledger</a>, the
+ <p>You can already verify your space hasn't been quietly tampered with: every
+ message is committed to a signed, append-only record, and your app checks that
+ chain and raises a flag if anything forks — live today on web, Mac and iPhone.
+ Alongside it: accessibility to the WCAG&nbsp;2.2&nbsp;AA standard on every surface,
+ moderation tools for the people who run spaces, and the trust posture behind the
+ encryption held to. The <a href="./security.html">security ledger</a>, the
<a href="./carbon.html">carbon tally</a>, the <a href="./books.html">books</a> and
the <a href="./prompts.html">prompt ledger</a> already publish the parts most
products hide — that stays a principle, not a phase.</p>
@@ -200,15 +211,17 @@
laid quietly under the hood.</p>
</li>
<li class="track">
- <div class="track-head"><h2>Run it yourself, easily</h2><span class="pill later">After V1</span></div>
- <p>Self-hosting Eleven on your own machine, down to a single command — and a way for
- people who host to offer that capacity to others.</p>
+ <div class="track-head"><h2>A network of independent hosts</h2><span class="pill later">After V1</span></div>
+ <p>Self-hosting is already here (see above); the next step is a way for the people
+ who run Eleven to offer that capacity to others — so hosting becomes an open
+ network of providers, not a single operator.</p>
</li>
<li class="track">
- <div class="track-head"><h2>Provable, not just promised</h2><span class="pill later">After V1</span></div>
- <p>Tamper-evident hosting: cryptographic checkpoints anyone can sample, so "the
- server can't quietly change what it stores" becomes something you can verify, not
- just trust.</p>
+ <div class="track-head"><h2>Provable to anyone, not just members</h2><span class="pill later">After V1</span></div>
+ <p>Members can already verify their own space's record hasn't been altered (above).
+ The next step opens that to outside witnesses — a public log anyone can sample — so
+ "the server can't quietly change what it stores" holds even for people who aren't
+ in the room.</p>
</li>
</ol>
</section>