Packages

@paramira/one-time-mailbox

Mailboxes reachable only through a single-purpose key: anyone holding the mailbox's public key can leave a sealed, signed message; only the mailbox's holder can read it and reply. Messages are sealed from a throwaway key, so a carrier sees which mailbox got mail, never who sent it. Transport-agnostic: records go wherever you put them.

License: MIT. Generic: sealed, signed messages to a single-purpose key, from throwaway keys.

Source: packages/one-time-mailbox

What it does

A mailbox reachable only through a single-purpose key. Whoever holds its public DID can leave a message; only its holder can read one and reply. Each message is sealed from a fresh throwaway key, with the real sender and their signature inside, so whatever carries it sees which mailbox got mail and in which month, never who wrote it or what it says.

Used for questions from reviewers to an anonymous witness (inzira), and meant for one-time contacts between matched families (ancestor matching). Make one mailbox per purpose and never reuse it: the mailbox's DID is visible to whatever carries its mail.

MIT licensed.

Used by

Packages: inzira

Uses

notices

Turning what's new into what a person sees: notices from any source, de-duplicated, filtered by what they follow, held during quiet hours or gathered into a daily digest, and rendered discreetly by default, so a lock screen never says more than 'something new'.

portable-entitlements

A portable, DID-signed, offline-capable entitlement resolver: the user holds a signed set of adopted capability ids, portable across devices and servers; an app resolves them against a shared catalog into unlocked grants and parameter overrides, with dependency composition. The engine behind @paramira/protocol-core, with the paramira-specific vocabulary removed.