What works today
OSL is in early access before its v1 launch. This page is the honest, dated record of what the shipping app actually does. Every feature page on this site links here. Matrix version 2026-07-26.
The rest of this site describes OSL v1 — the product we are building toward. This page is the exception: nothing here is forward-looking. If a capability is not listed as working below, do not rely on it, and do not buy Pro expecting it.
Working today #
Proven on test builds against a real conversation. Not yet proven on a numbered release build, which is why none of these is labelled Available.
| Capability | Status | Last verified | What that means |
|---|---|---|---|
| Per-message hybrid sealing | Beta | 2026-07-26 | Working. Every direct message is sealed to the recipient keys with a fresh key of its own, combining X25519 with post-quantum ML-KEM-768. Proven on test builds against a real conversation, not yet on a numbered release build. |
| Protected text send and read | Beta | 2026-07-26 | Working on Discord. Sending and reading protected text is proven on test builds. Discord is the only connector qualified so far. |
Not in the shipping app yet #
These are part of OSL v1 and are described elsewhere on this site as the product we are building. None of them is finished today.
| Capability | Status | Last verified | Where it actually stands |
|---|---|---|---|
| Cover text carrier | Planned | 2026-07-26 | Not yet. The readable text never reaches the connected service, but what the service currently receives is an obvious encrypted block rather than an innocuous-looking message. The natural-language cover mode is switched off in the current build because the post-quantum wire is too large for it. |
| Encrypted image sending | Planned | 2026-07-26 | Not in the shipping app yet. The encryption for images is written and the picker accepts PNG and JPEG, but nothing in the released app drives it end to end. This is not part of what a Pro purchase gives you today. |
| Non-image file sending | Planned | 2026-07-26 | Not yet. Only PNG and JPEG are offered; other file types are not supported. |
| Group chat and server channel protection | Planned | 2026-07-26 | Not yet. Group and channel protection is switched off in the shipping app, and the messages it would build carry no signature identifying the sender. Treat anything you write in a group or channel as unprotected. |
| Ratcheting (protecting old messages) | Planned | 2026-07-26 | Not yet. The mechanism that would keep old messages safe if a key is later stolen is written and tested but deliberately switched off pending independent review. |
| Attachment Privacy Guard | Planned | 2026-07-26 | Not yet. Stripping hidden details out of a file before encrypting it is written but nothing in the shipping app calls it. Assume a file you send still carries its original details. |
| Before-send warning | Planned | 2026-07-26 | Not yet. The detection code exists and is tested, but nothing in the shipping app calls it, so OSL does not warn you today. |
| Timed expiry | Planned | 2026-07-26 | Not yet. Timed deletion is not wired into the shipping app. |
| View once | Planned | 2026-07-26 | Not yet. Components are built; the production wiring and the two-party consent it requires are incomplete. |
| Burn | Planned | 2026-07-26 | Not yet as a peer action. When it lands, burn deletes OSL local and server-side state and asks the other side to delete too. It does not destroy anyone ability to decrypt what the service already holds, and it cannot recall a screenshot. |
| Link protection | Planned | 2026-07-26 | Not yet. This is a design intention with no code behind it. |
| Scrub discovery | Planned | 2026-07-26 | In progress, and the closest to landing. Scrub is designed to find the accounts and exposure you left behind, on your own machine. On the last measured run it found no accounts because the browser import does not yet hand its results to Scrub. |
| Guided deletion handoff | Planned | 2026-07-26 | In progress. The handoff takes you to the page where you delete; OSL never deletes for you. It cannot be exercised end to end until discovery produces accounts. |
| AutoScrub | Planned | 2026-07-26 | Not yet. AutoScrub repeats an approved plan with strict limits and a stop control. It is the one optional closed-source module, is not installed by default, and requires explicit consent to download. |
| AI-generated carrier text | Planned | 2026-07-26 | Not yet. Opt-in AI-written cover text. Cloud generation is never end-to-end private, because the service has to see the text it is working on. |
| Processing credits | Planned | 2026-07-26 | Not yet, and not on sale. Credits would be bought separately and never renew. |
| Automatic Pro expiry | Planned | 2026-07-26 | Not yet. A purchased code currently unlocks Pro without a redemption clock, so the month does not yet start when you enter the code. |
Connector support #
A logo appearing anywhere on this site never implies support. This table is the only place that says which services are supported.
| Connector | Protected send | Protected receive | Attachments | Scrub | Last verified | Status | Provider policy risk |
|---|---|---|---|---|---|---|---|
| Discord | Beta | Beta | Planned | Planned | 2026-07-26 | Beta | Using OSL may violate Discord Terms of Service and Discord may ban your account. No provider has tested, reviewed or approved OSL. |
| Signal | Planned | Planned | Planned | Not applicable | 2026-07-26 | Coming soon | Not qualified. No two-peer proof on any build. |
| Planned | Planned | Planned | Not applicable | 2026-07-26 | Coming soon | Not qualified. No two-peer proof on any build. | |
| Telegram | Externally blocked | Externally blocked | Externally blocked | Not applicable | 2026-07-26 | Externally blocked | Stable Telegram does not expose reliable accessible message rows. OSL will not fake support (master 7.8). |
| Outlook / OSL Mail | Planned | Planned | Planned | Planned | 2026-07-26 | Coming soon | Scoped as OSL Mail, not an ordinary chat overlay. |
Illustrations, not measurements #
- Country exposure comparison Illustration — A drawing, not a measurement. The homepage comparison summarises published agency and company practice. It is not a scan of your device, and this site never shows a live protection score.
- Product animations Illustration — Drawings, not recordings. Every animated scene on this site illustrates intended behaviour rather than showing the app running.
How to read the labels #
- Available — proven on a numbered release build. Nothing carries this label yet.
- Beta — the code does it and it has been exercised on a test build. Expect rough edges.
- Planned — part of v1, not finished. Some of it is written but not connected; some is design only.
- Externally blocked — a third party does not expose what OSL would need. We will not fake support.
- Illustration — a drawing of intended behaviour, not a recording or a measurement.
Not independently audited #
OSL uses a custom encryption construction that has not been independently audited, and no provider has tested, reviewed or approved it. If your threat model is high-stakes — legal investigation or targeted surveillance — use Signal, Briar or Cwtch instead. An internal source review is published on the audit page.
Protecting message content does not hide metadata. A connected service still sees who you talk to, when, and how often. OSL cannot change that.