Feature index
Precision-engineered features
Every feature below carries its real status. "In development" means it is part of the current Phase 1 build and not yet verified; "planned" means no code exists yet. Nothing here is available for download today.
In development now
The classic multi-tab model: tab strip, omnibox, navigation. One sandboxed browser view per tab, with tab lifecycle managed by a dedicated TabManager.
Named contexts that group tabs so research, development, and personal browsing stay apart. Phase 1 lays the foundation; the full persistent Workspace Mode grows in Phase 2.
Keyboard-first control surface for switching tabs and workspaces and running browser commands — the centerpiece of the speed principle.
Session state is continuously snapshotted to a local store so a crash or restart restores your tabs and workspaces.
Browsing history recorded to a local dataset on your machine — searchable, deletable, and never transmitted anywhere.
New tab page, settings, and diagnostics served over the internal itisyou:// scheme — trusted UI kept strictly apart from web content.
Every site permission request (camera, microphone, location, notifications) routes through one central PermissionService whose answer starts at no.
Present only as disabled interfaces: no provider, no API keys, zero provider calls. Off by default is a structural property, not a toggle.
Standard networking only in Phase 1 — but behind an abstraction, so proxy and Tor modes can be added later without rearchitecting.
Command palette
A design preview of the keyboard-first control surface — this is a mockup of the design spec, not a screenshot of a shipped build.
Planned — no code yet
Committed directions on the roadmap. We do not attach dates; milestones ship when they are verified.
Persistent workspace environments with richer organization on top of the Phase 1 foundation.
Alternative network modes through the network abstraction. Not implemented — no anonymity claims until built and verified.
Extension runtime. CEF's Chrome runtime style has partial support; full support may require the documented move to a Chromium source derivative.
Optional, opt-in synchronization. Local-first remains the default forever.
Local credential storage behind its own dataset boundary.
Signed installers for Windows, Linux, and macOS — the point at which downloads become real.