Sign up

ROADMAP

What’s next,
and what’s waiting.

What we intend to build, what we’re still working out, and what needs someone outside Undergrove first. No dates: we’ll say when something ships. Vote for what would matter most to you.

Waiting on others4

Needs an outside firm, a partner or funding first.

  1. Verification

    Check every model’s own enclave in your browser

    Today your browser verifies Tinfoil’s router, and only some model enclaves. Intel TDX enclaves need Tinfoil’s browser verifier to support them; when it does, receipts will show them as verified with no change on our side.

  2. Security

    An independent security audit, published in full

    An outside firm reviewing the relay, sync, shared links and shared projects, with its report published, findings and all.

  3. Security

    A public bug bounty

    Clear scope and rewards for anyone who finds a way to read what they shouldn’t.

  4. Accessibility

    An outside accessibility audit

    Our accessibility statement is self-assessed. An outside audit against WCAG 2.2 AA, with people who use assistive technology every day, would check it.

Exploring3

Working out whether, and how.

  1. Reliability

    A second place to run models

    Another region or provider with hardware enclaves to fail over to, so one outage doesn’t stop answers.

  2. Privacy

    Choose where your requests run

    EU or US processing, as far as Tinfoil’s regions allow, shown beside each model.

  3. Developers

    Run the gateway and relay yourself

    A kit to run Undergrove’s gateway and relay on your own servers, in front of the same enclaves.

Planned3

We intend to build it. Not started.

  1. Teams

    Organisation accounts

    Your domain, seats, roles and one bill, above shared projects.

  2. Workspace

    Work offline

    Everything but asking a model working without a connection, with messages sent once you’re back online.

  3. Billing

    Annual plans, invoices and VAT

    Pay for a year, get proper invoices, and have VAT handled for your country.

How votes are counted

  • Each item keeps one number: its total. Nothing about who voted is kept with it.
  • To slow down one person voting many times, a vote counts once per item per day, and each visitor has 10 votes a day. For that, our server keeps a keyed one-way hash of your IP address, never the address, for two days.
  • This browser remembers what you voted for, so the buttons show it. That stays on this device.
  • Anyone can still vote from several addresses, so read the totals as a rough signal, not a poll.
What already shipped: the changelog