Featured Product // Open Privacy Infrastructure
DAEMONET
Private digital infrastructure should be a public right.
Daemonet is a free, open, user-owned network fabric for connecting people, devices, and services without turning one provider into the owner of the relationship. Identity, keys, profiles, private names, access rules, recovery authority, and ordinary direct traffic remain with the people running the network.
Founded and built by Christopher Cordine. Daemonet is a founder-led nonprofit commons, and Christopher is currently its sole developer and steward.
Private-alpha software and service work. Repository implementation is not a claim of completed production deployment, independent audit, or general availability.
The Public Mission
The technology is open.
The official trust mark is governed.
Daemonet exists to make secure, private, self-custodied digital infrastructure available as a commons. Anyone can use it, study it, host it, extend it, build products on it, sell compatible services, or compete directly with the official operator.
Governed names and official marks protect people from impersonation and incompatible or unsafe products claiming official status. They are not a commercial veto over the protocol.
User authority first
Devices generate and retain their own keys. No support operator or managed database gets a master identity, universal recovery path, or quiet power to broaden access.
Replaceable providers
Self-hosting remains a real exit. A capable independent provider can implement and sell compatible Daemonet service without asking 1Man for technical permission.
Paid work compounds publicly
1Man customers fund implementation, hardening, automation, and operations whose reusable results strengthen the open Daemonet ecosystem instead of creating a deliberately inferior free edition.
Daemonet protects the right to run the technology. 1Man makes that technology easier to operate securely and sustainably.
Daemonet public compact
How It Works
A private network whose trust lives on your devices.
Daemonet combines identity, membership, naming, access policy, discovery, and route selection. A profile authenticates who a peer is; the destination still decides which exact service that peer may use.
Keys stay local
Signed device and profile state controls enrollment, ownership, revocation, recovery, and service policy.
Tor introduces
Bounded control messages and onion paths help approved endpoints find each other without making coordination infrastructure the application.
WireGuard carries
Approved peers establish direct encrypted paths, while host-held HTTPS keys authenticate the destination service.
No quiet downgrade
If identity, certificate, Tor, DNS, route, or entitlement checks fail, the connection fails visibly instead of choosing a weaker path.
Commons + Official Service
1Man works for Daemonet.
It does not become your Daemonet.
1Man is the official Secure Daemonet service: Cordine Labs' managed operations and integration layer for people and organizations that want the benefits without personally running every supporting system.
It may handle selected enrollment coordination, verified names, certificate workflows, entitlements, availability operations, support, and explicitly chosen capacity. It never silently becomes the owner of the user's network or the default application-data path.
License + Anti-Capture Rule
People pay for the work.
Not permission.
Daemonet and the reusable 1Man implementation use the same open software license. There is no private protocol license, non-commercial restriction, field-of-use restriction, or privileged exception reserved for Cordine Labs.
AGPL-3.0-only
Use, study, copy, modify, redistribute, self-host, sell support, operate a managed service, or build a competitor under the license. Network users of a modified service receive the AGPL source-offer protection.
CC-BY-SA-4.0 also available
Repository-authored documentation, specifications, diagrams, and public prose can be taught, translated, quoted, and republished with attribution and share-alike terms.
Governed separately
Independent products may accurately say “for,” “built with,” or “compatible with” Daemonet. They may not impersonate an official build, service, certification, or trust mark.
Sustainable Without Capture
A free system with paid, accountable operations.
The model is simple: Daemonet remains available to everyone, while 1Man earns revenue by taking on work users do not want to operate themselves. Its moat is security, reliability, automation, experience, and support—not a locked protocol.
Operation and assurance
Managed infrastructure, secure configuration, updates, migrations, monitoring, incident response, integrations, recovery assistance, and support.
Permission or a privacy upgrade
Core identity, direct peer traffic, self-hosting, export, and the privacy model are not premium features withheld from free users.
Commerce without a toll booth
DaemonPay links qualifying events to portable access rights. It takes no compulsory percentage cut and does not make 1Man a bank, custodian, marketplace, or universal issuer.
Current State // July 2026
Private alpha, with the evidence boundary left visible.
The repositories contain substantial working protocol, manager, identity, policy, routing, storage, entitlement, and managed-control foundations. That code is a launch candidate, not proof that every external service, platform, provider network, or future system is already production-ready.
Implemented and under test
- Device-held identity and signed profile authority
- Direct WireGuard paths and private profile naming
- Owner-approved service policy, revocation, and recovery
- 1Man enrollment, entitlement, naming, and route foundations
- Direct-only DaemonChat private-room implementation
Not overstated as complete
- Independent deployment and long-running field evidence
- Production domains, certificates, signing, and operations
- Platform release signing and broad device/NAT matrices
- Security, legal, tax, support, and incident-readiness review
- Payments, general availability, and regulated-service claims
Founder-Led by Design
One person can build serious internet infrastructure without building a monopoly.
Christopher Cordine founded Daemonet and currently designs, implements, documents, tests, and operates its full stack. The name 1Man is intentional: it is both the official managed service and a proof that careful automation can let one accountable builder operate infrastructure at meaningful scale.
The long-term test is bigger than one founder. Daemonet's license, compatibility rules, exit paths, and public mission are designed so the commons can survive commercial pressure, leadership changes, or a future in which other providers become better than 1Man at parts of the job.