Ecosystem Architecture Master Plan

Future Roadmap & Blueprints

Authoritative 14-phase engineering plan tracking the evolution of ZevSafe from an authenticated streaming encryption container into a complete zero-footprint ephemeral virtual workspace.

Roadmap Milestone Delivery 78.5% Complete (11 of 14 Shipped)
Phase 08 · v8.12 ⚡ Up Next

Argon2id WASM Memory-Hard KDF

Memory-hard key derivation via compiled WebAssembly runtime to render GPU/ASIC brute-force clusters economically infeasible, complementing standard PBKDF2.

RFC 9106 WASM 64MB RAM Cost ASIC Resistance
Phase 09 · v8.10 ✔ Delivered

Visual Paper-Safe & QR Sheet

Printable physical cold-storage recovery certificates with Guilloche borders, non-plaintext handwriting boxes, formatted 8-group salt fingerprints, and optical camera QR scanner.

Pure-JS QR Cold Storage Guilloche Border BarcodeDetector
Phase 11 · v8.9 ✔ Delivered

Know Your Device Power Profiler

100% offline WebCrypto hardware profiler benchmarking raw AES-NI / NEON throughput (MB/s) and PBKDF2 stretching latency across Class S, A, B, and C tiers.

Hardware Benchmark AES-NI / NEON PBKDF2 Latency Zero RAM Leak
Phase 14 · v8.4 ✔ Delivered

Native Password Manager Sync

W3C Credential Management API & semantic hidden forms enabling 1-click password saving into Chrome, Bitwarden, 1Password, and Apple Keychain.

W3C Credential Autofill Password Managers
Phase 13 · v8.3 ✔ Delivered

1-Click USB Air-Gap Backup Kit

Pure-JS PKZIP 2.0 generator exporting 100% standalone zero-network vaults with multi-OS launchers (.bat, .sh) and zero Google font CDN dependencies.

PKZIP Engine USB Air-Gap Zero CDNs
Phase 07 · v8.2 ✔ Delivered

Knowledge Hub & Manuals

Interactive knowledge portal disclosing all services with real-time keyword search, dual perspective (Simple vs Technical), and offline Service Worker precaching.

Knowledge Portal Dual Perspective 10 Manuals
Phase 06 · v8.1 ✔ Delivered

Duress Decoys & Plausible Deniability

Dual-manifest framing enabling believable secondary decoy vaults unlocked by alternate passwords without revealing primary confidential payloads.

Duress Decoy Dual-Manifest IND-CPA
Phase 05 · v8.0 ✔ Delivered

Polyglot Camouflage & Hardened KDF

Steganographic packaging disguising .zev vaults inside valid JPEG/PNG files with sliding-window marker detection and multi-tier KDF (up to 2.4M rounds).

Steganography Polyglot 2.4M Rounds
Phase 04 · v7.2 ✔ Delivered

AEAD Deep Scan & Salvage Engine

Diagnostic health verifier and fault-tolerant salvage engine that scans 4MB chunk auth tags, detects bit-rot, and rescues intact files from damaged vaults.

Bit-Rot Scan Chunk Salvage Diagnostic Report
Phase 03 · v7.1 ✔ Delivered

Cinema Player & Audio Dock

Direct in-browser media extraction and streaming playback for video and audio files with bottom persistent audio docking and keyboard control shortcuts.

Cinema Player Floating Audio Dock Zero Disk Writes
Phase 02 · v7.0 ✔ Delivered

In-Vault Virtual Filesystem (VFS)

Interactive file manager with hierarchical folder navigation, breadcrumb drill-down, live in-browser text editing, note creation, and image lightbox.

Virtual Filesystem Breadcrumbs Note Creator
Phase 01 · v6.9.6 ✔ Delivered

Security Ergonomics & Re-Encrypt

Direct in-vault file re-encryption, CSPRNG Diceware passphrase generator with entropy scoring, and automated inactivity lock timer.

Direct Re-Encrypt Diceware Passphrase Auto-Lock Timer
Phase 10 · v8.13 🔮 Planned

In-Vault Document Redaction

Client-side zero-knowledge document sanitizer that scrubs EXIF metadata, GPS tags, and camera serials, providing interactive black-box redaction before encryption.

EXIF Sanitizer PDF Redaction Zero Cloud Leak
Phase 12 · v9.0 🔮 Planned

Offline Multi-Language i18n

100% offline internationalization engine with localized JSON bundles for Spanish, German, French, Japanese, and Hindi without remote translation APIs.

i18n Engine Offline Packs Zero Telemetry