IN ACTIVE DEVELOPMENT · PRE-RELEASE
Open foundations for community-owned digital spaces.
OpenFederation enables communities to own their identity, data, and connections across the web — without being locked into any single platform.
01 :: OWNERSHIP
Keep control
Communities keep control of their presence and history.
02 :: PORTABILITY
Move freely
Move between services without losing people or context.
03 :: INTEROPERABILITY
Connect across
Connect across networks instead of rebuilding from zero.
Architecture
A personal data server and federated identity layer, built on open social protocols and interoperable standards.
Roadmap
More has shipped than a short list can show. The breakdown below is grouped by what's actually running, what's built but still being proven out, and what's genuinely not started yet.
See the full breakdown ↓Where things actually stand
Grouped by real status, not by wishful sequencing.
View live on GitHub ↗Shipped
- Identity layer —
did:plc/did:web, JWT auth, RBAC - Communities — CRUD, custom roles, governance modes
- Verifiable attestations & member role management
- Contact graph — requests, blocks, mutual/friend-of-friend discovery
- Cross-PDS handle resolution & notifications
- Community forums — threads, posts, moderation permissions
- Calendar events & RSVPs
- Cross-network identity bridging (Meshtastic, Nostr, WireGuard, SSH)
- Community & account migration — export, transfer, CAR import
- SDK, CLI, and admin web UI
- Security hardening — audit logs, rate limits, CSP
Built, being validated
- ActivityPub federation — coded, not yet tested against a live external network
- On-chain governance — coded, not exercised against a real chain
- Vault & key recovery (Shamir split) — untested end-to-end round-trip
- Progressive-custody wallet tiers 2–3
@open-federation/reactpackage- Disclosure proxy for selective attestation sharing
Not started
- A deployed, production federation network beyond this PDS
- Cross-platform community import (Discord, Slack)
- Cross-server community discovery
- Per-user activity timelines across servers
- Blob storage for avatars/banners
- Email verification on registration
Follow the work
No spam. Just meaningful updates.