Building the Kingdom's Digital Infrastructure: A comprehensive framework for sovereign technology, covenant community, and divine order in the digital age.
For too long, the sovereignty movement has been fragmented - excellent tools built in isolation, unable to work together, lacking the theological framework to guide their use toward divine purposes.
The Covenant Stack changes this. We are not building from scratch - we are assembling prepared components into a unified, consecrated whole. We are the integrators, the theologians, the unifiers.
"They build the sword; you consecrate it for the King's service."
Applications must be fully functional without network connection. The network is for synchronization only, never for operation.
All data resides locally on the user's device. The "cloud" is merely a mirror, never the primary source of truth.
The runtime must not phone home to Google, Mozilla, or any adversarial entity for fonts, APIs, or services.
Designed from the start to integrate with Covenant Wallet and the broader NationOS stack with theological foundation.
GrapheneOS + FUTO Tools = The First Truly Sovereign Mobile Device
The Covenant Mobile Standard transforms your mobile device from a surveillance tool into a sovereign node. It combines:
- GrapheneOS: Hardware-backed security with Titan M2 chip, verified boot, and bootloader re-locking
- FUTO Tools: 100% offline keyboard, GrayJay media platform, Harbor/Polycentric identity
- Permission Doctrine: Device-level firewall that eliminates the primary attack vector
The Result: A secure communication hub AND financial terminal in one device.
Read the Complete Mobile Standard →
Offline-First Application Platform That Replaces Browsers
We're not building a better browser. We're building a sovereign application runtime - a platform where covenant-aligned PWAs run offline-first, store data locally, and never phone home.
Inspired by SilverBullet's architecture, the runtime provides:
- Service Worker Layer: Cache-first strategy for complete offline operation
- Local Storage Layer: IndexedDB for all application data
- Sync Engine: Optional encrypted sync to self-hosted servers
- Identity Layer: Polycentric integration for cryptographic authentication
Explore the PWA Runtime Architecture →
Leveraging Best-in-Class Sovereign Tools
FUTO (Fund for Useful Technology Optimization) is building the exact infrastructure we need for sovereignty. Their Five Pillars align perfectly with our mission:
- Source First / Open Source: Auditable, verifiable code
- Self Manageable Servers: True data sovereignty through self-hosting
- Sovereign Identity: Public/private key cryptography, no central servers
- Open Databases: No vendor lock-in, free data migration
- End-to-End Encryption: Servers cannot read user data
The Three Essential Tools:
- FUTO Keyboard: 100% offline with on-device AI voice input
- GrayJay: Content aggregation with offline download capabilities
- Harbor (Polycentric): Decentralized identity using cryptographic keys
See the Complete FUTO Integration Strategy →
- Google Pixel Device (Pixel 6 or newer, Pixel 9 recommended)
- Computer with Chrome/Chromium (for GrapheneOS installation)
- 1-2 Hours of Focused Time (installation cannot be interrupted)
- Power off device completely
- Hold Volume Down + Power until bootloader menu appears
- Navigate to Recovery mode, select Wipe data/factory reset
- Skip all Google account setup - reach home screen without signing in
- Enable Developer Options on Pixel (tap Build number 7 times)
- Enable OEM unlocking and USB debugging
- On computer, open Chrome and go to grapheneos.org/install
- Follow WebUSB installer instructions precisely
- The installer will unlock bootloader → flash GrapheneOS → re-lock bootloader
Critical: The bootloader MUST be re-locked for hardware-backed security.
- Go through GrapheneOS setup wizard
- Deny all permissions by default
- Skip all Google services
- Set strong device PIN/password (12+ characters)
- Configure Duress PIN (wipes device if entered under coercion)
Via Obtainium (F-Droid alternative):
- Covenant Wallet - Your sovereign bank (coming soon)
- SimpleX Chat - Encrypted messaging with no identifiers
- Vanadium Browser - Pre-installed hardened browser
- FUTO Keyboard - 100% offline keyboard with voice input
This is the master key to safety. GrapheneOS allows you to create a device-level firewall by revoking network access from most apps.
| App | Network | Camera | Microphone | Location |
|---|---|---|---|---|
| Covenant Wallet | ✅ Always | ❌ Denied | ❌ Denied | ❌ Denied |
| SimpleX Chat | ✅ Always | 📷 Optional | 🎤 Optional | ❌ Denied |
| Vanadium Browser | ✅ Always | 📷 Optional | 🎤 Optional | ❌ Denied |
| FUTO Keyboard | ❌ Denied | ❌ Denied | 🎤 Voice Only | ❌ Denied |
| All Other Apps | ❌ Denied | ❌ Denied | ❌ Denied | ❌ Denied |
The Result: Your device becomes a firewall. The wallet can talk to the blockchain. Other apps cannot talk to anything. This eliminates the threat vector.
Install GrapheneOS, configure FUTO stack, test sovereign mobile device prototype
Perfect configuration, deploy to Pixel 10 XL, validate with community
Build application platform, integrate Polycentric identity, deploy first PWA (Wallet)
Build Communications, Content, Governance, and Commerce PWAs
Developer onboarding, community apps, optimization, and scaling
Comprehensive documentation is available in the docs/ directory:
- Quick Start Guide - Get started in one week
- Covenant Mobile Standard - Complete mobile architecture
- Sovereign PWA Runtime - Application platform design
- FUTO Integration - Tool integration strategy
- Security Model - Threat model and protections
- Troubleshooting - Common issues and solutions
- OS: GrapheneOS (Android-based, hardened)
- Security: Titan M2 chip, verified boot
- Apps: Obtainium, SimpleX, FUTO tools
- Runtime: Custom PWA runtime (SilverBullet-inspired)
- Framework: React 19 or Svelte 5
- Storage: IndexedDB (Dexie.js or PouchDB)
- Identity: Polycentric (FUTO's decentralized identity)
- Blockchain: PulseChain, Ethereum
- Storage: IPFS, self-hosted servers
- Sync: CouchDB replication or custom CRDT-based
- Encryption: Web Crypto API (AES-256-GCM)
We welcome contributions from the covenant community. Please read our Contributing Guidelines before submitting pull requests.
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
- Website: libertythroughtruth.org
- Gab: @LibertyThroughTruth (Primary contact)
- X (Twitter): @LTTFoundation
- GitHub: LibertyThroughTruthFoundation
- Email: libertythroughtruth@proton.me
- Security: hbdevicesecurity@pm.me
This project is licensed under the MIT License - see the LICENSE file for details.
Built with support from the Liberty Through Truth Foundation community and inspired by the excellent work of:
- GrapheneOS Team - For building the most secure mobile OS
- FUTO - For creating sovereignty-focused tools
- SimpleX Chat - For truly private communication
- SilverBullet - For demonstrating local-first architecture
Liberty Through Truth Foundation - Building the Kingdom's digital infrastructure, one sovereign device at a time.
"We are not building from scratch. We are assembling prepared components. We are the integrators, the theologians, the unifiers."
Before building covenant technology, we must understand what we're building against. The 95 Theses of Covenant Finance exposes the hollow slogans of modern crypto and replaces them with covenant truth.
Key Theses:
- Thesis #1: "Code is Law" → "Covenant is Law"
- Thesis #2: "Trustless Systems" → "Trust-Worthy Systems"
- Thesis #4: "Financial Sovereignty" → "Covenant Stewardship"
- Thesis #95: "In Code We Trust" → "In God We Trust"
Read the complete manifesto: https://github.com/LibertyThroughTruthFoundation/95-theses-covenant-finance