Roadmap

1. Phase 0

   Custody foundation

   Shipped

   Per-user subaccounts, and no path by which one user moves another's funds.

   x

   100%
2. Phase 1

   Username as the address

   Shipped

   Send to @handle instead of a 63-character principal.

   x

   100%
3. Phase 2

   Multi-token visibility

   In progress

   See every ICRC-1 holding. ICP is still the only one that moves.

   x

   80%

   • Discover SNS ledgers from SNS-W
   • Add the five chain-key ledgers
   • Balances and metadata per token
   • Live ICP price for fiat display
   • Send and receive non-ICP tokens

   Done when: Balances are live. Transfers are not — that is Phase 3.

4. Phase 3

   Multi-token transfers

   Next

   Make the tokens already on screen actually movable.

   x

   0%

   NeedsPhase 2

   • Generalize the ledger client to any ICRC-1 canister
   • Per-token fees read live from metadata
   • Per-token decimals
   • Per-token deposit and withdraw
   • Ledger allowlist

   Known risks

   A malicious ledger canister can trap or misreport. Ship an allowlist before an open field.

   More tokens means more balance queries. Queries are free on the IC, so the cost is latency, not cycles.

   Done when: A user sends ckUSDC to @handle and the fee came from live metadata, not a constant.

5. Phase 4

   Token creation

   Planned

   Launch a token from the wallet without touching dfx.

   x

   0%
6. Phase 5

   Liquidity and on-chain trading

   Planned

   Swap, then pay a handle, in one flow.

   x

   0%
7. Phase 6

   Decentralizing custody

   Planned

   Stop one key being able to change the rules.

   x

   0%
8. Phase 7

   Merchants and payments

   Planned

   Payment requests, settlement, refunds as first-class objects.

   x

   0%
9. Phase 8

   Shopping

   Planned

   A merchant directory, listings, and orders in the wallet.

   x

   0%

Dates are deliberately absent. A phase ships when it is safe to ship, and this wallet holds real funds.