9.0 QSeal

Post-quantum authentication for the deepest work.

QSEAL SHADOW TIER

Sealed communication above the messenger floor: post-quantum authentication, stream sealing, and verification built for work that cannot surface. Unlocked with Shadow.

Request an invite Read the spec

KEM ML-KEM-1024
Manifest signatures ML-DSA-87
Stream AEAD ChaCha20-Poly1305

01 / THE SEAL — LIVE

Press seal. Watch the data stop moving.

O f K f E k 8 h X X m i z v 0 f QH g a K C v Y N / F Z D S n T a Lv + E 8 v 4 1 Q C U 3 f f M 89 O L d 2 D A v i U Z Z j W 0 j 63 L q K m Dh X X m i z v 0 f Q DD x G u 4 7 X p r t q zS 6 A c K + 2 Db G U M C I t 9 f U D R Lb 5 A e Y D 9 v 1 4 z V F B A 2 oX b l n N 5 l + + 5u n F c O 3 + O H / I o U Z S k 6r b u S 3 L q K m D m a 4 zD m a 4 z T 7 3 g E J 0 g V 0 q 8Y z H G b a M p N j L O O J p8 j q z Q F

Vault open. The cipher rain falls.

Every falling glyph is real ciphertext — an authored demo vault sealed with ChaCha20-Poly1305 (RFC 8439) when this page was built. The demo key ships beside the ciphertext on purpose: open it and check.

A vault at rest. The rain is real ciphertext from an authored demo vault — press [ SEAL ] and every glyph freezes into its outline. It shows the state change, not your data.

02 / THE COMPARTMENT — LETTERED

Read the seal, layer by layer.

9.0 / A

The authentication layer

Q-SEAL — Quantum-Secure Entangled Authentication Layer: a post-quantum authentication compartment for the Shadow tier. You authenticate, you enter, and you work in a space the rest of the app cannot see.

Gate: Biometric, on-device — the key never leaves your phone to answer
Primitives: ML-KEM-1024 + ML-DSA-87 — the same crypto-core beneath every tier
Adds: Compartmentalization, not new math

“Quantum” in the name is the post-quantum floor — ML-KEM-1024 (FIPS 203) and ML-DSA-87 (FIPS 204). QSeal builds a compartment above that floor; it does not change the ciphers you already have.

9.0 / B

The sealed compartment

Behind the layer sits a completely separate encrypted space, reachable only after Q-SEAL authentication — invisible to the regular app.

Entry: Q-SEAL authentication, every time — verification before entry
Visibility: No trace in the standard surfaces
Separation: Storage, messaging, and media sealed apart from the rest of the app

1¹

authentication layer stands between the app and the compartment

9.0 / C

Stream sealing

Media crosses into the compartment as QSEAL-Stream: a chunked post-quantum envelope with per-chunk integrity and one signed manifest covering the whole stream.

Envelope: Chunked — ChaCha20-Poly1305 per chunk
Manifest: One ML-DSA-87 (FIPS 204) signature over the whole stream
Verify: Tamper is rejected before a single chunk opens

The compartment is a capability, not a stronger cipher. Every tier already has maximum crypto.

The Connection Floor

03 / THE VERDICT — CATEGORY COLUMNS

Set it against a folder and a PIN.

Category columns only — never named products
Real workloads
	QERYX QSeal	Standard app compartments	No compartment
Casual device inspection	Compartment invisible without QSeal authentication	Folders visible	Everything visible
Compartment entry	Post-quantum authentication + biometric gate	PIN reuse	Not included
Media in the compartment	QSEAL-Stream sealed, signed manifests	App-level encryption	Camera roll
Server view	Sealed blobs, indistinguishable	Sealed blobs, indistinguishable	Plaintext backups common

04 / ACCESS — STATED ONCE

Read the access terms once, plainly.

QSeal is part of Shadow, alongside Shadow ID and Ghost Serpent. This build carries no purchase surface and no price: the Underground compartment opens after v1, and the tier ladder is set out on pricing.

Every existing feature runs at maximum capability for everyone. Higher tiers unlock new capabilities — apps, tools, modes — and never upgrade a primitive you already had.

Request an invite

05 / THE HARD QUESTIONS

Ask what the compartment does not do.

What is QSeal in one sentence?

A post-quantum authentication layer that opens a sealed compartment above the standard messenger floor.

What lives inside?

Work that cannot surface: its storage, messaging, and media are sealed separately from the rest of the app.

Why is this Shadow-only?

The compartment is a capability, not a stronger cipher — every tier already has maximum crypto. Shadow unlocks the tool.

What can be handed over under subpoena?

The same as everywhere: sealed blobs. The compartment adds separation on your device, not a new server surface.

How much?

Nothing. This build carries no purchase surface and no price. QSeal is part of Shadow, and the tier ladder is set out on pricing.

Next: 9.1 SHADOW ID