Ghostdrive — the memory network
Memory that outlives the cloud.
Everything you would hate to lose — photos, voices, documents, the knowledge your AI learns from — sealed on your device and kept alive by a network that can never read it.
open protocol · encrypted on device · IPFS-compatible
01 — The problem
Your life is stored on someone else’s computer.
They read it. They train on it. They can lock you out. And when the company disappears, twenty years of memories disappear with it.
one company · one key · one point of failure
02 — Split
Every file becomes blocks.
Ghostdrive cuts a file wherever its content changes, into blocks of 256 KiB or less. Each block is named by its own fingerprint. Change one paragraph and only one block changes.
content-defined chunking · CIDv1 · sha2-256
03 — Seal
Sealed before it leaves.
Every block is encrypted on your device with AES-256-GCM, under keys that come from your passkey or wallet and never leave it. What travels looks like noise to everyone but you.
AES-256-GCM · HKDF-SHA256 · zero plaintext leaves the device
04 — Scatter
Kept by strangers. Read by no one.
Sealed blocks travel peer to peer, node to node, browser to browser. Every block is checked against its fingerprint on arrival, so no one can slip in false data. The more people read, the faster it gets.
libp2p · Kademlia DHT · WebRTC · verify, don’t trust
05 — Prove
Proven, not promised.
Storage providers are challenged at random and answer with tiny cryptographic proofs. A contract checks every one and pays only for proofs that pass. They earn for keeping what they can never open.
Merkle storage proofs · escrow on Base · in testing
06 — Wise Data · for companies
A private AI workforce for your company.
Hire agents in one line and give them your data room — contracts, calls, research, numbers. They learn your business and work as a team, while the knowledge stays sealed under your company’s keys. Anything risky waits for a human yes.
Wise Office live · company data room · approvals · on-prem models next
- Legal
- Finance
- Research
- Sales
- Operations
07 — Learn
An AI that remembers you.
Your personal agent reads your vault on your device, with a key you grant and can take back. It remembers what chat apps forget — your files, notes and calls — and no one else can read a byte of it.
local-first · capability access · MCP server on the roadmap
08 — Connect
Share a key, not your life.
A capability is a key to exactly one thing. Give it to a friend, a team or another agent, and knowledge moves peer to peer — no accounts, no middleman, no copy left on a server.
read capability · drive369:v3:<cid>:<key>
09 — Collective memory
A memory for humanity.
When you choose to share, it joins a public layer of knowledge with provenance anyone can check. One 26 KB zero-knowledge proof vouches for the entire registry, every entry signed by independent reviewers.
recursive zk-SNARK · 2-of-3 reviewers · anchored on Base
The memory layer for people, companies and their AI
Your memory. Your keys. Everyone’s network.
Five ways to take part, starting today.
10 — Take part
Five ways into the network.
Keep
Open your Vault
- Unlock with your wallet — passkeys next
- Drop files: they are split and sealed in your browser
- Share any file as a one-line capability
Wise
Give your company a private brain
- Hire agents in one line, wired as a team
- Feed them your data room — sealed under your keys
- Approve every risky action before it happens
Host
Run a node
- Run the ghostdrive daemon on any machine
- Stake and accept storage deals
- Answer challenges, get paid per verified epoch
Build
Give your agent memory
- @ghostdrive/protocol — TypeScript, browser and Node
- A local node with an HTTP API
- An MCP server for any agent — on the roadmap
Govern
Shape the DAO
- Hold DRIVE, the network’s utility token
- Vote on upgrades, committees and treasury
- Review golden datasets as an evaluator
11 — Five words
The whole idea in five words.
Named by the SHA-256 fingerprint of its encrypted bytes, so anyone can check it and nobody can read it. Every block is a standard IPFS block.
AES-256-GCM with keys derived from your own credential. Identical pieces of your own files share blocks, which is why versions cost almost nothing.
drive369:v3:<cid>:<key>. Whoever holds it can read that file, and nothing else. No accounts, no permissions database to breach.
Random 1 KiB segments plus their Merkle paths, checked by a contract on Base. Providers are paid only when the proof verifies.
Entries scored by at least two of three evaluators, folded into one recursive zero-knowledge proof and anchored on Base. A light client checks it in about 280 ms.
Measured with npm run bench on an Apple M5 Pro, protocol v3.1. Storage contracts are not yet deployed or audited.
12 — Questions
No. Files are encrypted in your browser before anything leaves it, and the keys never leave your device. Nodes, relays and gateways only ever see sealed blocks.
Today your key ring is derived from a wallet signature or a recovery phrase. Passkeys, social recovery and inheritance are on the roadmap — we will not call it finished until losing a device cannot lose a life.
It speaks IPFS. Every sealed block is a standard IPFS block with a normal CID, so any IPFS node, gateway or pinning service can store it. Ghostdrive adds encryption, capabilities and proofs on top.
Anyone with spare disk. Providers stake, accept storage deals and are paid per epoch only for proofs a contract verifies. The contracts are in testing and not yet audited.
Paying for storage, staking as a provider, and governing the protocol through the DAO. It is a utility token, not an investment, and nothing here is financial advice.
The protocol, the browser Vault, the peer-to-peer swarm and the zero-knowledge registry run and are tested. The storage market contracts are written and tested but not deployed.