An order, not a schedule. Bootstrapped and slow, shipped one phase at a time. No dates and no cadence promise — and every line here stays inside the public threat model.
The cryptographic core and the documents that govern it.
The single-user app you write in, running entirely on your device.
Zero-knowledge sync — the server only ever holds ciphertext.
The same vault, the same encryption, in your pocket and your browser.
Shared, real-time editing — once the rest of the product is solid.