Skip to content

OPENPULSEEDGE: PROBING—ms

OpenPulse
ACT 01 · communication surface

One wire. From Helsinki to Mars.

OpenPulse is how you communicate. Encrypted handles, DMs, collab, and agent streams on one session. Verify email, claim @you, delete your realtime stack.

Claim your handle

Claim @youbefore someone else does.

Pick a name, verify your email, and it is yours. One @handle on the network. No extra suffix. Messages stay encrypted end to end.

Lowercase, numbers, underscore, or dot. 3 to 30 characters.

You need a verified email and keys stored on this device. We save a hash of your email, not your messages. The app unlocks with passkey or fingerprint. Email is for signup and recovery, not a daily password.

02 / 08

Wire SSOT · not storage

One encrypted session. Delete the stacked transports.

OpenPulse owns live truth — merge delivery, reconnect, and multiplexing until your app commits a snapshot. Mongo, S3, and vault indexing stay yours. Loro-class version sync, messenger-grade traces, CRDT collab, spine merges, and files ride the same E2EE wire.

Verified email leads to handle claim, then msg, trace, and doc streams on one encrypted PulseSessionVERIFIED EMAILidentity gate@novaGLOBAL HANDLEmsg.*UNIVERSALtrace.*MESSENGERdoc.liveCOLLABPULSESESSIONdid:key + E2EE · QUIC · operator-blind relay
Human

@handle, DMs, groups — same identity as agents

Agent

Service DID + @handle after verified email

Integrator

App Realm · trace.* · doc.* · msg.* on PulseSession

SDK surfaces · one session

msg.*

Universal DMs & groups

replaces Pulse ID messaging

trace.*

App messenger

replaces Trace SSE + job poll

doc.live

CRDT collab

replaces Hocuspocus / PartyKit

doc.canonical

Spine authority

replaces Redis spine fan-out

vault.notify

Resource bumps

replaces resource-events SSE

scope.notify

Workspace inbox

replaces multiplex SSE
Claim your @handle

Identity gate for every surface above — verify once, communicate everywhere.

03 / 08

Universal envelope

One wire. Any payload.

A single CBOR envelope carries chat, CRDT deltas, trace commits, file chunks, and agent streams. Humans, agents, and services share one identity model and one trust model — a 10-byte message and a 10 GB file differ by profile, not by protocol.

Transports one session retires
trace SSEHocuspocusRedis spineresource-events SSEworkspace multiplexjob SSEDIY WebSocket stack
Heterogeneous payloads sealed into one CBOR envelope on one wirePAYLOAD STREAMSONE SEALED ENVELOPEANY PARTICIPANTMessageMailAgentCRDTFileCustomCBORv1HEADERvidfromtokindSEALEDchacha20humanagentorgcommunity1 wire · 1 envelope · any payload
openpulse · CBOR envelope notation
{"v": 1,"id": "evt_7f3a09c2","from": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK","to": "did:key:z6MkpTHR8VNsBxYAAWHut2Geadd9jSwuBV8xRoAnwWsdvktH","kind": "message/text","trace_parent": "evt_5d11a0b4","sealed": {"alg": "chacha20-poly1305","ciphertext": "b64u:9hJ3kQf2…"}}

04 / 08

Loro-class sync on the wire

Live cursors, trace drafts, agent tokens — one stream.

Version vectors, catch-up, fork, and frontiers on the same QUIC session as messenger-grade traces. 60/120Hz CRDT coalescing and Lane B agent drafts — no second transport for collab or SSE for chat.

60/120Hz collabCRDT stream

Live cursors, not refreshes.

Incremental STREAM presets carry CRDT operations at collaboration rate. Every keystroke is a sealed delta on the same wire as everything else.

Two peers edit one document over one stream.

peer_apeer_b
Provider-native streamsAgent stream

Agents use the same channel.

An agent is a DID-bearing participant, not a separate network. MCP tool calls are one payload profile. Any provider or framework can stream tokens, tool results, and state deltas over the same encrypted session.

one PulseSession · channel.mode
Earth → Interplanetary.

Same envelope. Any distance.

stop 01 / 04 · QUIC + TLS 1.3

…msrtt · hel1

Connected Earth

Live RTT from the Helsinki edge (HEL1). Frankfurt is next. Multiplexed streams and 0-RTT resumption on the hot path the relay is built for.

stop 02 / 04 · Store-and-forward

minutesone-way

Disconnected Earth

No live peer? Sealed envelopes park in object storage and forward when the recipient returns. Nothing is rewritten in transit.

stop 03 / 04 · DTN / BPv7

hoursone-way

Disruption-tolerant

Bundle Protocol v7 custody transfer carries the same envelope across links that come and go. Delay is a property, not a failure.

stop 04 / 04 · Same DTN profile

one-way · mars

— AUrtt

3mband22mjpl horizons

Interplanetary

Mars is often occluded. Live one-way light time from JPL Horizons. The profile stays the same. The same envelope rides multi-week custody chains.

06 / 08

Trace graph for causality.

Causality that survives light-time.

Every encrypted event seals references to its parents. Replies can cross hours, days, or weeks of delay and arrive out of order. The graph preserves causality when clocks are not enough.

Parent-linked trace graph of encrypted eventsevt_5d11evt_7f3aevt_a3f0evt_c77b

07 / 08

Operator-blind by design

Encrypt before it leaves. Blind in the middle.

Production 1:1 sessionsEnd-to-end encryption

Signal Protocol target

OpenPulse standardizes on official libsignal for X3DH and the Double Ratchet. Current static-session work is transitional and clearly tracked until the production ratchet is wired.

Production groupsGroup

MLS target

Group encryption is specified around MLS: one tree, thousands of members, and epoch-based rekeying once the production adapter lands.

InfrastructureRelay node

Operator-blind relays

Relays route sealed envelopes and see routing metadata only, never plaintext. Metadata minimization is specified, not implied.

Security → encryption, subprocessors, disclosure

For integrators

Org → Realm → sticky edge → Console

Bootstrap an App Realm, mint Access, prove the fence in Lab. Auth, Mail, and Pay are Features on the same wire.