BITCOIN

Sovereign engineers build mobile OS, silent payments to bypass Apple

Tuesday, April 14, 2026 · from 4 podcasts

Citadel Dispatch No Solutions Plebchain Radio Ungovernable Misfits

Developers strip Android to its kernel, building a hackable mobile OS with integrated Bitcoin and Nostr.
Silent payments solve address reuse, cutting blockchain scan times from hours to seconds.
Artists flee Spotify's AI purge, migrating music catalogs to Nostr and Lightning for direct payments.

A parallel stack is forming to bypass permissioned mobile ecosystems. Builders are creating tools that embed financial and social sovereignty directly into hardware and operating systems, rejecting the sandboxed models of Apple and Google.

Justin Moon is building Shadow, a mobile OS that boots a Pixel 4a to a bare-metal user space using Rust and TypeScript. He argues current devices are 'sandboxed prisons.' His project trades corporate safety for raw hackability, aiming to function like a sovereign Linux server. Moon’s architecture moves 'sovereign primitives' like Lightning wallets and Nostr relays to the OS level, allowing all apps to share a single backend for identity and payments.

"I think the biggest hurdle for sovereign engineering is that the middle of the bell curve of AI assistants like Claude and ChatGPT drag you back toward high-level, permissioned APIs."
- Justin Moon, No Solutions

Payment privacy is getting a similar overhaul. Craig Raw, creator of Sparrow Wallet, developed silent payments to end address reuse - a problem affecting over 50% of transactions in bull markets. The technology lets users post a single, static payment code. Each donation or payment arrives at a unique, unlinked address. Raw solved the initial scanning bottleneck by moving computations to GPUs, speeding up the process by 14 times.

For artists, the migration is not philosophical but existential. Musician Henrik Flyman watched his Spotify followers collapse from 14,000 to 300 in six months. He attributes the purge to platforms prioritizing AI-generated content. He is now moving his entire catalog to the Value-for-Value ecosystem, self-hosting RSS feeds to ensure no corporation stands between his music and his audience.

On the home server front, StartOS is shedding its niche Bitcoin-node reputation. The 0.4 release replaces Docker with LXC containers and introduces StartTunnel, a VPS-based proxy that provides faster, more reliable remote access than the unstable Tor network. The goal is a general-purpose server that can replace Google Drive and Slack, controlled from a Start WRT router at the network's edge.

These projects share a core thesis: true digital sovereignty requires rebuilding the stack from the kernel up.

"The legacy industry is no longer a partner for artists, but a system of control and censorship. Moving to a protocol-based economy isn't a tech experiment; it's a survival strategy."
- Henrik Flyman, Plebchain Radio

Payments Custody Privacy

Spotify Bitcoin Docker Nostr TypeScript

Source Intelligence

What each podcast actually said

Citadel Dispatch

CD199: CRAIG RAW - SILENT PAYMENTS AND SPARROW WALLET • Apr 13

Craig Raw argues Bitcoin's HD wallet system, introduced in 2013 via BIP32, improved address generation but still suffers from high address reuse, which degrades network-wide privacy.
Craig Raw cites evidence that 25-35% of Bitcoin addresses are reused, a rate that can spike to 50% during bull markets. This reuse creates a negative privacy externality for all users.
Silent payments aim to provide a static, reusable payment code while enforcing fresh addresses for each transaction, aligning privacy with convenience.
The primary technical challenge for silent payments is client-side scanning cost. Early implementations required hours of computation, making them impractical for average users.
Full hardware wallet support for silent payments requires implementing new BIPs, including BIP376 for spending, and discrete log equivalence proofs to prevent coordinator fraud.
Multisig wallets cannot currently send to silent payment addresses, though Craig Raw suggests an intermediate transaction workaround is possible but not yet implemented.
Craig Raw calls for three ecosystem groups to adopt silent payments: hardware wallet vendors to implement standards, node/Electrum server operators to run scanning services, and individuals to test the technology.
Odell cites OpenSats' logistical burden of managing 200 unique addresses for monthly grant payouts as a prime use case for a static silent payment address.

Also from this episode:

Protocol (4)

Craig Raw explains BIP47, an earlier static payment code solution, failed to gain broad adoption primarily because it lacked hardware wallet support, requiring the private key for address derivation.
Silent payments solve the HD wallet gap limit issue, which can cause wallets to miss transactions if too many future addresses are queried without payment.
Craig Raw developed Frigate, a server-side solution that uses GPU acceleration to reduce silent payment scanning from hours to seconds, enabling potential public server support.
BIP353 allows combining a static on-chain silent payment address and a static Lightning invoice into a single human-readable identifier like user@domain.com, verified via DNSSEC.

Privacy Protocol Adoption

No Solutions

23: Shipping Violently w/ Justin Moon • Apr 13

Shadow aims to solve the UX fragmentation of Bitcoin/Lightning by providing a single, system-level Lightning node and wallet that all apps can plug into, eliminating the need for separate wallet setups per application.
He envisions a future where personal AI agents, not users, handle maintenance and payments for ephemeral cloud compute, creating a sustainable monetization model for permissionless services.
Justin is skeptical of building encrypted group chat (like his project Pika) entirely on Nostr relays due to metadata leaks and coordination issues, and is exploring simpler, server-based signaling with Nostr identities.

Also from this episode:

Startups (2)

Justin Moon is building a mobile operating system called Shadow to maximize hackability and user control, rejecting the permissioned, sandboxed models of iOS and mainstream Android.
The goal for Shadow is to provide a platform where users can 'vibe code' their own apps in TypeScript, distributing them like DMs without app store gatekeeping or complex build infrastructure.

AI & Tech (3)

His development philosophy prioritizes removing abstraction layers and working close to the bare metal, a heuristic he calls 'agentic engineering', even if it temporarily reduces productivity.
Justin develops Shadow using two approaches: booting a Pixel 4a with minimal Android code, and incrementally replacing components like the GPU compositor on a running, rooted Android system.
He observes that AI agent capabilities have reached a threshold where non-programmers, including project managers and designers in the Sovereign Engineering cohorts, can now successfully build and demo software.

Coding (2)

He built demo apps including a cash wallet, a Nostr client, a photos app, and a podcast player, each around 500 lines of TypeScript, to validate the platform and move beyond basic graphics demos.
The project uses Nix for its deterministic build system, requiring contributors to have Nix installed to compile and flash the OS onto a rooted Pixel 4a or run it in a KVM emulator.

Digital Sovereignty (1)

Justin argues past Linux phone projects failed because their builders weren't daily phone users and lacked a compelling vision for mobile apps, unlike the Nostr community where a third of users in one poll used GrapheneOS.

Protocol (1)

The Phipps protocol aims to replace permissioned identity systems like DNS and IP addresses with a cryptographic networking layer, allowing both overlay networks on existing internet and offline mesh networks.

Agents Coding AI Infrastructure Big Tech

Plebchain Radio

Sunday Brunch 13: Henrik Flyman • Apr 12

Also from this episode:

Culture (5)

Henrik Flyman started his music career in Sweden with early bands like Moani Moana, which released a maxi CD around 1992 and an album in 1994 that was featured on MTV's Headbangers Ball.
After moving to Copenhagen in 2000 with just an amp, guitar, and a sports bag, Flyman formed the band Evil Masquerade, which produced seven albums and one compilation.
He became the second guitarist for the German goth band Lacrimosa in 2009, joining a five-week world tour starting in Buenos Aires with little prior knowledge of the band's music.
Flyman spent over a decade touring with Lacrimosa globally until around 2020, when he chose to leave due to differing views on global events and societal expectations.
He began a prolific solo project in November 2021, self-releasing 82 tracks under his own name by March 2025, focusing on writing, recording, and self-production.

Media (2)

Flyman categorizes his solo work as 'shadow music', which explores contrasts between light and dark and the intersection of his diverse musical background.
The host notes that Right Said Fred, famous for 90s hit 'I'm Too Sexy', has recently joined the value-for-value space, releasing their song 'Lord Have Mercy' and onboarded by community member Aaron of Essex.

AI & Tech (1)

He experienced a dramatic decline on Spotify, with active followers dropping from 14,000 to 300 within about six months, which he attributes to the platform's opaque algorithms and push for AI music.

Protocol (2)

Flyman migrated to the value-for-value ecosystem around September 2024, using platforms like Fountain, Wave Lake, and Nostr to distribute music and connect directly with listeners, citing censorship and gatekeeping in traditional systems as key motivators.
He recently transitioned to self-hosting his music feed to achieve true decentralization, moving away from centralized platforms like Wave Lake to control his own RSS feed and artist identity.

Digital Sovereignty Media V4V

Ungovernable Misfits

Cryptosquid Unpacks the NEW StartOS | FREEDOM TECH FRIDAY 36 • Apr 11

The StartTunnel feature requires installing a router on a separate, user-purchased VPS to obfuscate a home server's IP and allow Clearnet access with a custom domain. CryptoSquid notes cheap, less-KYC VPS options exist.
The upcoming StartWRT router OS, built on a RISC-V architecture and a forked OpenWRT, is designed for easy point-and-click privacy management. It can be installed on compatible hardware like a GL-iNet Flint.

Also from this episode:

AI Infrastructure (7)

CryptoSquid explains that StartOS 0.4 enables remote Clearnet access via a local IP and port or a new StartTunnel gateway service, a major shift from relying solely on Tor onion services.
CryptoSquid states the StartOS 0.4 update is a complete OS rewrite, taking about five hours. It requires stopping all services and creating a full backup before proceeding.
The StartOS registry system now includes a separate community registry for user-packaged services. The official StartNine registry contains fully vetted and supported packages.
CryptoSquid says the new SNPK package format simplifies service creation, enabling AI-assisted packaging. Users can sideload personal packages or submit them for the community registry.
A new SMTP service allows StartOS to send emails for user management in apps like Vaultwarden. Future notifications for node health could utilize this or a separate NTFY service.
StartOS moved from Docker/Podman to LXC containers for the backend, which CryptoSquid states makes the system smoother and causes fewer issues.
Planned features include automatic and remote backups to services like Proton Drive or other StartOS servers, as well as expandable external storage support.

BTC Markets (1)

CryptoSquid advises that running Bitcoin and other services on one Dockerized server is safe for most users, as the attack surface is low. Paranoid users can run separate dedicated servers.

Open Source Privacy Protocol Startups