Changelog

wisp 0.0.2, the second cut

Still a wisp, since the name is the release line and the number is the cut. Every 0.x release is a wisp, 1.x will be shade, and specter, phantom and poltergeist come after. This is 0.0.1 with the day's fixes, and the first cut whose GitHub release holds everything its notes promise, the server, the signed app with its APP.txt, the source archive and a SHA256SUMS signed by the site key. The mirror's server and app sets carry it.

• Photos a phone saved as HEIC with an unfamiliar brand were archived as videos. The box now reads every brand in the file, and at its first start on 0.0.2 it re-reads the archive once and puts each one right.
• A lost phone can be retired by its key, with ghost-cli ghost.secd retire on the box or from another phone, and every call it makes after that is answered as if the box were down.
• The release cut stops before tagging when the app can't be built or signed, and the upload no longer stops on a name collision, which is what left three files off 0.0.1's page.
• The repository's README, CONTRIBUTING.md and SECURITY.md describe what is built, CI runs the Go and app tests, and the tree builds on a Mac.

The app installs over 0.0.1 and keeps the enrolment. Known gaps at 0.0.2 are the certificate authority's key on the system disk (by choice, so a phone can be enrolled or retired while the vault is locked), ten-year device certificates, releases signed by the site key alone, an APK that isn't byte-reproducible yet, and no Mist, mail or decoy volume.

wisp 0.0.1, the first release

The server for linux-amd64, built reproducibly from the tag, and the Android app, signed with the app's own key (certificate SHA-256 3dcc5e35…f0cdf4, in full on Set Up a Box). Both went on the GitHub release and on the setup mirror as the server and app sets, which carry the newest release. From this release on, a box takes new releases from the phone (DEPLOY), checks them against the mirror's signed manifest and rolls back by itself if the new build fails its first unlock.

Eleven daemons ship in it, ten doing their whole job and ghost.shadowd with its first detector. The known gaps at release are the certificate authority's key on the system disk, a trusted header on secd's loopback port, releases signed by the site key alone, no per-device revocation, no recovery path, and no Mist, mail or decoy volume yet.

Set Up a Box, and the mirror's release sets

Set Up a Box goes up, the whole setup in the order the server repo's scripts expect, from a bare Debian install to a phone that unlocks the box. The mirror gains the server and app sets, fifteen sets in all.

Status, privacy, terms and security.txt

The site gains a status page with an incident history, privacy and terms pages naming LocalGhost.ai Ltd (company number 17213100), and an RFC 9116 security.txt. The About page now keeps what wisp 0.0.1 does apart from what's planned for v1.0.

Time zones, heights and Wikipedia on the mirror

The mirror adds the world's time zone boundaries and IANA's rules (tz), the Copernicus DEM at 90 metres (elevation) and English Wikipedia as a Kiwix ZIM (wikipedia). The last two are refreshed by hand because of their size. Upstream is now checked at most once a month.

Speech on the mirror

whisper.cpp v1.9.4 (whisper), pinned like llama.cpp, and Whisper large-v3-turbo (speech), for transcribing the voice notes of the daily check-in on the box.

The setup mirror

The setup mirror goes up with a SHA-256 manifest signed by the site key, starting with GeoNames and Natural Earth (geo), OpenStreetMap's land polygons, the Go toolchain and the Gemma 4 12B weights. Over the following days it adds llama.cpp v0.5.0, EmbeddingGemma, the phone's model and Geofabrik's road extracts, and boxes stop falling back to upstream sources.