# ForgeSworn

> ForgeSworn is an open-source workshop: apps you can use today and libraries you can build with, on Nostr, Lightning and plain cryptography, so that identity, money, files, location and conversations answer to the person rather than to a platform. MIT-licensed projects in eleven focus areas that work standalone or compose into full workflows. The live catalogue lists the current projects.

## Pages

- [Landing page](https://forgesworn.dev/): products you can run today, the creed, and the full repo catalogue grouped into eleven focus areas
- [Ecosystem map](https://forgesworn.dev/map/ecosystem-map.svg): every project on one page, grouped by what it does (SVG; printable A4 PDF at https://forgesworn.dev/map/ecosystem-map-a4.pdf)
- [Use cases](https://forgesworn.dev/use-cases.html): 32 end-to-end workflows, each naming the exact libraries it composes
- [4K listening room and comparison player](https://forgesworn.dev/media-lab.html): the complete licensed Deja Vu mix leads the homepage. Play & join starts or joins a shared listening clock and real RelaySwarm participation. The first listener starts the recording, later listeners join live, the starter can leave while others continue, and the room expires after the last listener leaves a short grace period. Pause leaves; Play rejoins live. The recording loops while occupied; the 1080p excerpt has its own room. The live listener ticker includes joined listeners and excludes read-only page observers; Play/Pause events update it directly, with lease expiry for abrupt departures and unknown status during lost room observation. A confirmed empty room invites the first listener to start. One visible player per visitor, room participants distinct from locally connected peers, stable identity mapping through peerConnectionDetails(), proportional media-batch movement and rates, source-host feeds, explicitly self-reported remote links, separate host/verified-peer/upload byte counters and recent local peer contribution. The browser integration pins RelaySwarm 0.4.2 with its peer-ticket renewal fix. Sharing has no 15-minute wall-clock cutoff while playback continues; the finite cumulative upload allowance remains visible. Natural loops retain peer connections, identity and cache; automatic clock corrections wait for sustained drift and stable, safely buffered playback without changing music tempo. The responsive swarm picture keeps short labels and puts transfer rates and contribution statistics below it. A 16 KB score derived from the soundtrack drives a musical broadcast pulse against actual media time; pause, buffering, hidden pages and reduced motion stop it. This does not establish exact global audience counts or multi-speaker audio synchronisation. The Rust/WASM scheduler exchanges site-verified pieces of the unchanged 4K source, with HTTP completing the remainder, native controls, a Back to live action and shared-room invitation links. Integrity uses a site-pinned HTTPS digest catalogue with receiver-local commitment signing. Resource limits and reproduction: https://github.com/forgesworn/forgesworn.dev/blob/main/docs/media-showcase.md. The local runner compares native Sapflow and MediaMTX with the same H.264/AAC source and optionally real RelaySwarm delivery through Spry or coturn over UDP/TCP. Public process results are dated recordings; live origin CPU requires the local runner. Reproduction: https://github.com/forgesworn/forgesworn.dev/blob/main/docs/media-lab.md
- [GitHub organisation](https://github.com/forgesworn): public source code
- [402.pub](https://402.pub): live directory of Lightning-paid APIs

## Products people can use today

- [flock](https://flock.forgesworn.dev): coercion-resistant group locator; end-to-end encrypted location over Nostr, guidance by voice, sound and vibration (source: https://github.com/forgesworn/flock)
- [KithMoot](https://kithmoot.forgesworn.dev): multi-device video rooms over Nostr; a room is a secret held by whoever has the link, and a person on two devices appears as one participant (source: https://github.com/forgesworn/kithmoot, Android: https://github.com/forgesworn/kithmoot-android)
- [DonkeyRide](https://donkeyride.forgesworn.dev/about): ride-hailing and dispatch with nobody in the middle taking a cut; reference implementation of the TROTT protocol (source: https://github.com/TheCryptoDonkey/donkeyride)
- [Wildbloom](https://wildbloom.forgesworn.dev): browser encryption, replicated or erasure-coded storage pools, owner-controlled repair, trusted signed node recommendations, optional direct-to-operator checkout and fresh full-read storage audits. Archipelago defaults uploads to the operator's own node and lets that operator opt in to sell a bounded share at their own prices and terms. ForgeSworn provides the software, not a storage service or marketplace (source: https://github.com/forgesworn/wildbloom)
- notecase and moneyer: an LNURLcash (LUD-25) bearer-note wallet and mint (npm: @forgesworn/notecase, @forgesworn/moneyer)
- [Heartwood](https://heartwood.forgesworn.dev): hardware Nostr signer on an ESP32 with a keyless bridge; clients bark (browser, https://bark.forgesworn.dev) and cambium (Android, https://cambium.forgesworn.dev)
- [Bray](https://bray.forgesworn.dev): trust-aware Nostr MCP server for AI agents (npm: nostr-bray)
- [My Signet](https://mysignet.app): decentralised identity verification with ZK age proofs; drop-in SDK signet-verify
- Kintrinsic: libre, self-hosted digital wardship on a family's own keys (source: https://github.com/forgesworn/kintrinsic, SDK on npm: @forgesworn/charter)

## Key libraries

- [toll-booth](https://github.com/forgesworn/toll-booth): L402 middleware, any HTTP API becomes Lightning-payable in one line (npm: @forgesworn/toll-booth). Try `npx @forgesworn/toll-booth demo` or the live demo at https://jokes.forgesworn.dev
- [402-mcp](https://github.com/forgesworn/402-mcp): MCP client so AI agents can discover, pay for, and consume L402/x402 APIs (npm: 402-mcp)
- [nwc-kit](https://github.com/forgesworn/nwc-kit): small, security-focused NIP-47 Nostr Wallet Connect client (npm: @forgesworn/nwc-kit); site at https://nwc-kit.forgesworn.dev
- [nwc-lnd-bridge](https://github.com/forgesworn/nwc-lnd-bridge): minimal NIP-47 wallet service in front of an LND node, invoice-only by default
- [farrier-kit](https://github.com/forgesworn/farrier-kit): Lightning payment primitives without running a node: BOLT-11 decoding, preimage verification, LNURL-pay resolution (npm: farrier-kit)
- [moneyer](https://github.com/forgesworn/moneyer) and [notecase](https://github.com/forgesworn/notecase): LNURLcash (LUD-25) mint and crash-safe wallet for Lightning bearer notes
- [bray](https://github.com/forgesworn/bray): trust-aware Nostr MCP server for AI agents, 258 tools across identity, social, payments, dispatch, trust, and privacy (npm: nostr-bray)
- [nsec-tree](https://github.com/forgesworn/nsec-tree): deterministic Nostr sub-identity derivation, one master secret, unlimited unlinkable identities (npm: nsec-tree)
- [heartwood](https://github.com/forgesworn/heartwood): keyless NIP-46 bridge for hardware Nostr signers (ESP32 or Ledger)
- [signet](https://github.com/forgesworn/signet): decentralised identity verification, tiers, Signet Score, ZKP age proofs (npm: signet-protocol); user app at https://mysignet.app
- [canary-kit](https://github.com/forgesworn/canary-kit): deepfake-proof spoken verification with silent duress detection (npm: canary-kit)
- [dominion](https://github.com/forgesworn/dominion): epoch-based encrypted access control with tiered audiences (npm: dominion-protocol)
- [kintrinsic](https://github.com/forgesworn/kintrinsic): self-hosted digital wardship; guardian app, Android ward app, Linux warden, Nostr wire contract (npm SDK: @forgesworn/charter)
- [wildbloom](https://github.com/forgesworn/wildbloom), [wildbloom-node](https://github.com/forgesworn/wildbloom-node), [shelter-kit](https://github.com/forgesworn/shelter-kit): encrypted, content-addressed Blossom storage over HTTPS or optional Tor: browser client, self-hosted node and Rust storage core. Pool recovery needs the signed receipt, recovery key and enough surviving parts. Full-read audits prove current retrievability, not continuous custody. ForgeSworn Link integration is planned, not a current Wildbloom transport.
- [kithmoot](https://github.com/forgesworn/kithmoot): multi-device conference rooms over Nostr; second implementation in Kotlin at kithmoot-android
- [Live media stack](https://forgesworn.dev/live-media.html): build live broadcasts with Sapflow SRT/RTMP ingest, LL-HLS packaging and optional recording; add RelaySwarm peer-assisted HLS and operator-selected Spry TURN when needed. Public MIT libraries. The film-led 4K listening room shows actual visitor connections and delivery; direct peers and HTTP fallback run in the public browser, while native Spry/coturn comparisons remain local. Native adapters and physical-device acceptance have separate qualification gates.
- [Live media benchmarks](https://forgesworn.dev/live-media-benchmarks.html): methods, versions and raw results for Sapflow, RelaySwarm and Spry TURN. In the 23 October 2026 M4 Max loopback test with 750 simulated viewers, Sapflow's optional own HTTP loop with 16 workers used 79% less CPU and 90% less process RSS than MediaMTX 1.21.2; default Hyper used 64% less CPU. These are workload-specific measurements, not deployment capacity guarantees.
- [Spry TURN](https://forgesworn.dev/live-media.html#spry): optional MIT Rust STUN/TURN relay, separate from Sapflow ingest and HLS. Public 0.2.1 binaries delivered 16–22% more UDP and 27–35% more TLS packets/s than tested coturn 4.18.0 on M4 Max; TCP ranged from 1.2% behind to 8.5% ahead. Linux ARM64 VM results were mixed. The linked benchmark report retains all 108 M4 samples, platform limits and corrected RelaySwarm composition results: UDP passed; TCP/TLS timing gates remain open, and TLS lacked an active selected path at the final sample. Actual KithMoot web generated-media calls passed local UDP/TCP/TLS qualification with operator credentials; cross-network and physical-phone acceptance remain open. Source: https://github.com/forgesworn/spry-turn.
- [relayswarm](https://github.com/forgesworn/relayswarm): peer-assisted HLS live streaming with WebRTC signalling over Nostr relays instead of a tracker; Swift port relayswarm-kit
- [nostr-veil](https://github.com/forgesworn/nostr-veil): anonymous trust assertions via LSAG ring signatures over NIP-85 (npm: nostr-veil)
- [nostr-anon-vote](https://github.com/forgesworn/nostr-anon-vote): anonymous voting on Nostr with LSAG ring signatures (npm: nostr-anon-vote)
- [rendezvous-kit](https://github.com/forgesworn/rendezvous-kit): fair meeting points for N participants via isochrone intersection (npm: rendezvous-kit)
- [gopherkind](https://github.com/forgesworn/gopherkind): signed gopherholes served from Nostr relays (kind 31436), with Gopher, Gemini, HTTP and CLI readers (npm: gopherkind); site at https://gopherkind.com
- [ring-sig](https://github.com/forgesworn/ring-sig), [range-proof](https://github.com/forgesworn/range-proof), [shamir-words](https://github.com/forgesworn/shamir-words), [private-equality](https://github.com/forgesworn/private-equality): standalone cryptographic primitives (npm: @forgesworn/*)
- [anvil](https://github.com/forgesworn/anvil): supply-chain-hardened npm release tool, reproducible two-runner builds, OIDC trusted publishing, SLSA provenance
- [nip-drafts](https://github.com/forgesworn/nip-drafts): 30 draft Nostr protocol extensions

## Contact

- Nostr: _@forgesworn.dev (NIP-05), npub1mgvlrnf5hm9yf0n5mf9nqmvarhvxkc6remu5ec3vf8r0txqkuk7su0e7q2
- Sponsor: https://github.com/sponsors/TheCryptoDonkey