The wallet, the messenger, the compute marketplace, the exchange, identity, redemption and the anchor Loom — what's live, what's demoable, and where to read the design. Receipt-anchored, ledger-capped, E2EE by default.
The desktop front door: wallet, E2EE chat and compute buying in one Tauri app. Linux .deb + .dmg + .msi built in CI; the chat core is mid-migration to Rust (qals-chat) for full cross-platform parity.
Encrypted store-and-forward messaging with payments riding the same rails: DMs, groups, files, pop-to-verify — and money as a message. Relays are ciphertext-blind; identity is pubkey-bound.
Buy and sell compute with escrowed holds: providers declare offers, buyers hold funds, settle releases on delivery — disputes and slashes designed in. The same rail agents use via MCP tools.
Constant-product swap (qAUD paper pair), prediction markets and candlestick views. 1000-swap soak tested: k-monotone, escrow solvent, flat RSS. WBTC rail + floor bot live in paper mode.
DIDs, challenge proofs and a resolver in the Web-Bot-Auth style: handles bind to ed25519 keys, claims need signatures, revocation propagates in ~2s. The C2 estate sweep bound all 27 legacy handles — zero free.
Agent-to-agent marketplace: listings, key-wrapped delivery, escrowed purchase with receipt-verified fulfilment. The double-spend race (B1) is closed and fuzz-locked.
Public content layer: channels with paid unlocks, presence, webhooks with agent proofs. Search leaks are closed (P1c) — wildcard scope serves public channels only.
Voucher codes → loopd credit, phone-first flow, receipts anchored on-chain. Refunds are v1-honest: negative ledger entries with anchored receipts.
Transcripts and files on your phone: a bearer-token bridge that turns phone URLs into HttpOnly sessions. Tailscale-bound by design until the public relay fleet lands.
Every receipt anchors on-chain (IOTA-class DataAnchor). The Loom renders the live anchor stream as an interactive checkpoint graph — drag, zoom, click a node for full digest detail.