SIAR System Architecture & Technical Wiki

SIAR: Secure, Interoperable, Autonomous & Resilient Peer-to-Peer Communication Platform.
Built in Rust for mobile, desktop, headless daemons, embedded Linux nodes, and anonymous network cloud relays.

Welcome to the SIAR System Architecture Wiki. This knowledge portal contains 176 comprehensive technical specifications totaling 514,448 lines and 875,254 words, covering every engineering layer from low-level Postcard framing and OpenMLS multi-device cryptography to delay-tolerant bundle forwarding, pure-Rust audio DSP, cross-platform Dioxus/Compose shells, global Loopix mixnets, zero-trust measured boot, and sandboxed WASM extensions.

📚 Essential Architecture Companions

Before exploring individual specifications, engineers and operators should consult the master synthesis documents:

🏛️ Corpus Architecture: The 3 Tiers

sys-arch/ (176 Specifications · 514,448 lines · 875,254 words)
│
├── Tier 1: Core Mesh & Local-First Engine (Parts 01 – 33)
│   105,732 lines · 33 Specifications
│   Focus: P2P wire framing, multi-device MLS keys, dynamic routing policy,
│   resumable BLAKE3 blobs, DTN data mules, emergency QoS, lock-free audio DSP.
│
├── Tier 2: UI/UX & Cross-Platform Shells (Parts UI/UX 01 – 27)
│   72,610 lines · 27 Specifications
│   Focus: Desktop Dioxus 0.7 shells, Android Jetpack Compose shells, design tokens,
│   virtualized timelines, composer, call surfaces, out-of-band pairing, security center.
│
└── Tier 3: The Anonymous Network & Cloud Operating Ecosystem (Parts 34 – 150)
    336,106 lines · 116 Specifications (Parts 34–138, 140–150; 139 reserved)
    Focus: Global Loopix mixnet, Sphinx onion packetization, zero-trust cloud servers,
    TPM measured boot, physical datacenter tamper detection, PIR search, WASM sandboxes.

⚡ Complete Specification Matrix (18 Parts)

PartTitleRangeKey Systems Engineered
IProtocol Foundation & ExtensionsSpecs 01, 07, 21–24Wire codecs, envelope framing, capability negotiation, WASM plugin ABI
IIIdentity, Trust & CryptographySpecs 02, 28Multi-device key trees, OpenMLS ratchet, identity root keys, forward secrecy
IIIMesh Networking & TransportsSpecs 03, 11–15Dynamic routing, Iroh QUIC, multipath bonding, BLE/NAN/LoRa, QR/NFC bootstrap
IVDTN & Emergency MeshSpecs 06, 17Delay-tolerant bundle store-carry-forward, epidemic routing, SOS alerts
VStorage, Outbox & LifecycleSpecs 04, 05, 09, 32, 33Append-only outbox, BLAKE3 Merkle-DAG blobs, crash recovery, Tantivy FTS, vault export
VIRealtime Media & Audio DSPSpecs 25, 26, 29Zero-copy video surfaces, pure-Rust audio DSP (AEC, NS, AGC), call signaling
VIIPresence & NotificationsSpecs 30, 31Ephemeral availability, typing state, read receipts, unified push wake
VIIINative Daemons & FFISpecs 16, 19, 20, 27Headless daemon runtime, C-ABI FFI bindings, OpenWrt/embedded nodes, Android packaging
IXReliability, Testing & FuzzingSpecs 08, 10, 18Memory quotas, backpressure, AFL++/libFuzzer harnesses, live path visualization
XUI/UX Client ArchitectureSpecs UI/UX 01–27Desktop Dioxus, Android Jetpack Compose, tokens, timeline, contacts, security center
XIMixnet MechanicsSpecs 34–42Loopix Poisson delays, Sphinx packetization, cover traffic, directory consensus
XIIAnonymous App PrimitivesSpecs 43–49Private group fanout, anonymous VoIP signaling, blind reputation & ZK tokens
XIIISovereign Policies & BoundarySpecs 50–70Data sovereignty, anti-enumeration naming, panic kill switch, legal boundaries
XIVZero-Trust InfrastructureSpecs 71–81TPM measured boot, HSM key custody, reproducible SBOM, Raft consensus, mTLS
XVPrivate Cloud ServicesSpecs 82–94Passkey auth, private contact graph, PIR search, differential privacy metrics
XVIDefense & SecOpsSpecs 95–100Continuous compliance, incident containment, threat hunting, disaster failover
XVIISRE & Physical ReliabilitySpecs 101–121Adaptive load-shedding, FinOps, SLOs, facility environmental & physical tamper security
XVIIIGovernance & Extension EcosystemSpecs 122–150Requirements knowledge graph, developer CLI, sandboxed WASM plugins, marketplace

🎯 Role-Based Reading Paths

🛡️ 1. Cryptography & Security Architects

  1. 02 — Multi-Device Identity & Trust Model
  2. 28 — Production Security, E2EE, Key Management & Privacy
  3. 15 — Out-of-Band QR & NFC Bootstrap Pairing
  4. 34 — Loopix Mixnet & Sphinx Onion Packetization
  5. 39 — Cryptographic Agility & Hybrid PQ-KEM Layering
  6. 71 — Trustworthy Boot, Attestation & Binary Measurement
  7. 72 — Hardware Security Modules (HSM) & Key Custody
  8. UI/UX 15 — Security Center, Devices, Keys & Recovery

📡 2. Mesh Networking & Protocol Engineers

  1. 01 — Protocol Extension System Architecture
  2. 03 — Transport & Routing Policy Engine
  3. 06 — DTN Store-Carry-Forward & Bundle Forwarding
  4. 12 — Multipath Networking & Link Aggregation
  5. 14 — Proximity Abstraction (BLE, Wi-Fi Direct, LoRa)
  6. 17 — Emergency Priority Classes & Critical Alert Mesh
  7. 36 — Cover Traffic, Heartbeat Loops & Obfuscation
  8. 41 — Routing Failure Modes & Fault Tolerance

💾 3. Storage, Database & Sync Engineers

  1. 04 — Offline Event Log & Sync Engine
  2. 05 — Robust File & Blob Subsystem
  3. 09 — Crash Recovery & State Integrity
  4. 32 — Search, Indexing & Local Privacy Retrieval
  5. 33 — Backup, Restore, Export & Long-Term Archival
  6. 74 — Database Persistent State & Storage Engines
  7. 67 — Storage Minimization & Cryptographic Erasure

📞 4. Realtime Media & Audio DSP Engineers

  1. 29 — Realtime Calls & Media Session Protocol
  2. 26 — Rust-First Audio DSP (AEC, NS, AGC, Resampling)
  3. 25 — Android Direct Surface Zero-Copy Media
  4. 45 — Anonymous Ephemeral Voice/Video Signaling
  5. UI/UX 07 — Calls & Realtime Media UX

📱 5. UI/UX & Frontend Engineers (Desktop / Mobile)

  1. UI/UX 01 — Product UX Foundation & Cross-Platform Interaction
  2. UI/UX 02 — Desktop Dioxus App Shell & Navigation
  3. UI/UX 03 — Android Jetpack Compose App Shell & Lifecycle
  4. UI/UX 05 — Conversation Message Timeline UX
  5. UI/UX 06 — Message Composer, Attachments & Voice Notes
  6. UI/UX 22 — Design System, Tokens, Typography & Motion
  7. UI/UX 23 — Responsive & Adaptive Layouts

☁️ 6. Cloud, SRE & Operations Engineers

  1. 62 — Deployment, Packaging & Reproducible Operations
  2. 76 — Distributed Consensus & State Coordination
  3. 78 — Edge Gateway, Reverse Proxy & WAF
  4. 101 — Capacity Management & Admission Control
  5. 109 — Service Level Objectives & Error Budgets
  6. 117 — Physical Datacenter Tamper Detection & Security
  7. 120 — Post-Incident Review & Root-Cause Analysis