Vision

Development Roadmap

Explore upcoming features, architectural milestones, and platform releases planned for Sino.

Completed Implemented

Milestones 1 - 5: OmniMirror Cloud RAID

Establishment of client-side Zero-Trust cryptographic engine and multi-cloud sync infrastructure.

  • IronCore Root Master Keys (StrongBox/TEE)
  • AES-256-GCM database key wrapping
  • Background Heartbeat Sync (WorkManager)
  • MEGA Client Integration with 2FA
  • Many-to-Many OmniMirror Cloud RAID Engine
Completed Hardened

Milestones 6 - 10: Open Core

Folder-level tiering, streaming playback, and standalone open-core verification layers.

  • Granular Folder-to-Provider Data Tiering
  • Multi-S3 Profile Registry & Redundancy Badges
  • VolatileStream 4K Playback & Virtual Drive (SAF)
  • Samsung StrongBox Attestation Workarounds
  • Open Sourced Cryptographic Core SDK (sino-open-sdk)
v2.0.0 Milestone KMP Core & AegisStream

Universal KMP & AegisStream

Transition of 100% zero-knowledge cryptography, chunked streaming, and sync orchestration into platform-agnostic KMP core.

  • 100% Core Extraction (:sino-core)
  • AegisStream Chunked Streaming (1MB chunks)
  • AegisStream Version 2 Sealed Containers ([SINO][0x02])
  • Unified Field-Level Encryption & BlindSight Indexing
  • IronCore Dual-Key Protocol (TEE + Argon2id Auto-Repair)
Completed Desktop Release

Desktop Workstation & Virtual Drive

Compose Multiplatform desktop workstation release for Windows 10/11 with Dokany virtual filesystem mounting.

  • Compose Multiplatform GUI (:desktop)
  • Dokany Virtual Drive (First free letter from S:)
  • IronCore Windows TPM 2.0 & DPAPI Machine Entropy Key Binding
  • Windows Hello Biometric Authentication
  • Post-Quantum ML-KEM-768 & ML-DSA-65 Suite Integration
Evaluation

Storage Candidate Audit

Sino is designed to be storage-agnostic. However, to maintain our strict local-first, zero-knowledge security mandate, every provider is audited against rigorous architectural constraints.

Evaluated Candidates (Phase 11)

  • Azure Blob Storage: Integration utilizing SAS (Shared Access Signatures) and direct Access Key configurations for raw user-owned object containers.
  • Dropbox Integration: Implementation using direct client-side OAuth tokens, linking standard consumer storage via API.
  • Box Support: Enterprise storage targets routed via local OAuth sync sessions.

Security Auditing & Rejections

If a candidate requires central registration, third-party authentication servers, or cloud-hosted credentials owned by Sino, it is strictly rejected to preserve total local privacy.

Rejected
Firebase Storage: Evaluated and rejected. Firebase requires a centralized Project ID and API endpoint controlled by the application publisher. Using it would violate the "No-Sino-Server" mandate and create a centralized privacy checkpoint.

Cross-Platform & Desktop Foundation (Phase 12)

iOS Keychain Bridge

Marked out of scope for this release. Native Apple ecosystem support is deferred to future architecture cycles.

Desktop Virtual Drive (Completed)

Mounting the unlocked vault as a Windows 10/11 drive via Dokany with on-demand in-memory decryption; Local Vault folders also accept new and edited files.

Sino Encryption Core is Open Source

In line with our commitment to zero-knowledge transparency, Sino's offline vault recovery and audit CLI tool resides in a public, auditable repository under sino-open-sdk. Review, audit, or verify our security proofs.

View Open SDK on GitHub Contact Security Team