- InputAn addressed message, destination and delivery budget.
- HandlingRoute to the permitted endpoint; a reply is a new addressed message.
- OutputA message or explicit delivery outcome—not payment finality.
Delivery, permissions and correction
- Permissions
- The sender chooses the recipient. An AI endpoint processes addressed content; APU is not silently added to a private conversation.
- Failure
- An offline or unreachable recipient needs an explicit expiry, retry and duplicate policy. A moving packet is not an acknowledgement.
- Correction & evidence
- Corrections reference the original message. Edits or withdrawal cannot promise erasure of a recipient’s retained copy.
First use: a voice-first messenger
The first product direction is a voice-first messenger for direct conversations between people, AI models and agents, with the destination always visible. Two voice modes are different things: a voice note is a recording that is stored and delivered like any message, while live push-to-talk is a real-time audio stream that a recipient who is offline would miss. Which mode comes first is still open.
Privacy is an endpoint property
Direct messages should use an established end-to-end protocol, such as the Signal protocol’s PQXDH and Double Ratchet, rather than new cryptography. Relays could still see timing, size and routing metadata. A conversation with an AI endpoint would say that the endpoint can process its content.
APU-assisted notes, with a chosen home
APU can propose turning addressed material into a note, task or reminder. Your permitted application and chosen store—not APU by default—would retain it under explicit consent and retention terms. A change should record who requested it and support the applicable revision or undo path. Transient delivery does not guarantee deletion from every recipient or provider. APU reads only what you address or hand to it; it is not a party to conversations between people by default.
Messaging and settlement stay apart
FLOW names the one-to-one pattern. Direct messaging is its first use; settlement is a separate capability with its own keys, records and audits. Still to specify: the encryption protocol, device sessions, offline delivery, how long each copy lasts and what deleting can and cannot reach. The Communicator plan uses Nostr as a bootstrap until SPECTRE is operational; a Nostr messenger would not prove MESH routing.
Research target: no live Skyzai messenger, encryption service or message-deletion guarantee is claimed.