VideoChats granted-native
the webrtc layer of the granted trust envelope

Calls that prove themselves.

VideoChats is a granted-native WebRTC platform: rooms keyed to wallet identity, media relayed by a LiveKit SFU, every packet classified by the same hypervector law that guards the mesh. No passwords anywhere in the stack — your wallet is the login, your UCAN is the ticket.

Launch the app → read the law ↓
vc — live session
— booting the platform…

Two lanes into every room

The platform serves operators and strangers differently on purpose: identity-bearing members ride the wallet lane, everyone else rides a guest link. Both land in the same E2EE call.

LANE 01

Wallet members

granted PoW login mints an httpOnly UCAN session — the signaling socket never sees a password because none exists. Your Matrix identity (@you:videochats.ai) rides the same plane via OIDC.

PoW ✓ · UCAN ✓ · E2EE ✓
LANE 02

Guest links

/room/<id> drops a stranger straight into the call — no account, no wallet, no install. The link IS the capability; revoking it revokes the room.

zero-onboarding join
SFU

LiveKit relay

Media flows through a LiveKit SFU (wss://live.videochats.ai) with access JWTs minted by granted from Matrix OpenID tokens — the SFU authenticates the caller, never the password.

MSC4195 · HS256

The law, not a promise

Every trust decision in the stack is a measured fact with a cryptographic handle — the same laws that run the mesh, the mining pool, and the notary run this call plane.

identity
wallet PoW (SipHash-13 difficulty, auto-calibrated) → UCAN minted by granted, aud = this host
session
httpOnly SameSite cookie — the browser never holds the token, XSS has nothing to steal
media auth
Matrix OpenID → granted /get_token → LiveKit JWT (sub = @user, video.room scope, 6h TTL)
e2ee
cross-signing keys derived from the wallet mnemonic — one secret, no 48-char recovery ceremony
replay
every frame carries a nonce through the ZKP bloom ring — a replayed frame never reaches the fleet twice
federation
OIDC code flow against granted.ai — the homeserver never holds a password database at all

Packets carry evidence

The tunnel hypervector detector (THDC) classifies traffic geometry — known, replay, alien — the same law that guards the z3n mesh runs on this plane's telemetry. An imposter stream doesn't just fail auth; it looks wrong.

THDC

Geometry fingerprints

Windowed packet features (sizes, direction, timing) encoded as sparse bipolar hypervectors, distilled to 64-level detectors, chained by sha256 custody.

known · replay · alien
Z3

Three Z's, live

Zone-aware routing, zombie liveness tables, ZKP nonce rings — the mesh stack underneath the rooms, the same deployment that runs packets.ai.

zone · zombie · zkp
∞

Goldrush events

Every observation is an event through the goldrush manager — no polling GenServers, no unbounded tables; verdicts are events, thresholds are measured, not hardcoded.

oath-clean by construction

Measured, not marketed

Live figures from the running stack.

—
SFU rtt (ms)
—
public rooms
0
passwords in stack
64
detector levels / window

Open a room. That's the demo.

Wallet login or guest link — you're one click from a call that attests itself.

Launch app.videochats →