Whispr is currently an early-stage prototype exploring the intersection of End-to-End Encryption (E2EE) and optional client-side content filtering.
This is not a finished product. It is a technical demonstration of an "Honest Prototype" where all advanced features are clearly labeled as planned or experimental.
- Rule-based Filtering: Client-side pattern analysis is currently Regex-based. There is no "Semantic AI" or "LLM" running yet. It catches keywords based on the Constitution.
- Minimum Viable E2EE: Currently uses Classical Double Ratchet (X25519 + AES-GCM). This is stable but standard; non-quantum.
- Memory Shredding: Implements a
double-wipemechanism for sensitive buffers in Web Workers. - Blind Server: Message content is never seen by the server. Only encrypted blobs are stored in R2.
Important
For a full list of architectural limitations and out-of-scope features due to Cloudflare Free Tier boundaries, please see CURRENT-LIMITATIONS.md.
- Frontend: React 18 / Material 3
- Crypto Worker: Web Workers using
@noble/curves(X25519) - Safety Worker: Regex engine driven by
constitution.json - Backend: Cloudflare Workers (Hono) + R2 Storage + KV Signaling
npm installnpm run dev- Type "kill him" in the chat to test the Constitutional AI block.
- See SECURITY.md for the actual status of security features.
- See THREAT-MODEL.md for what this prototype does (and doesn't) protect you from.
- See CONSTITUTION-IMPLEMENTATION.md for how the filter actually works.
Whispr: An experiment in balancing privacy with responsibility.