Roadmap

Three phases: now, next, later. Phases are not dated. A line moves from "next" to "now" when it ships.

Pipoke runs on Octra Devnet today. Any fee, price, or limit referred to here is a contract setting chosen for testing. Every one is owner-settable, and mainnet values will be different.

#Now

Live on Octra Devnet today.

32-shard feed with text, voice, video, image, GIF, and audio posts
Voice-note replies and voice-note comments, on chain
Stories with a fixed TTL
Follower-only, mutuals-only, and close-friends-only privacy tiers
Edit and delete on your own posts
Reactions, bookmarks, pins
Pokes (tips)
Follows, blocks, mutes
Premium tiers (four SKUs, no lifetime)
Engagement rewards by Merkle proof
End-to-end encrypted DMs
End-to-end encrypted group chats
Coin launcher with bonding curve and post-graduation AMM
Per-coin chat channels
Sealed-bid commit-reveal auctions on 16 public shards
Anonymous auctions on 16 anonymous shards
Digital file, Biont NFT, other NFT / OCS token, and RFP auction kinds
Anonymous posts on 8 anon-feed shards
1v1 duels on 8 duel shards
Anonymous voice rooms (backrooms)
Drops with live audio + video + screen share + on-chain VOD
Community rooms with 5-speaker cap and open audience
Communities with multi-admin governance, POKE treasury, mod queue, appeals, mod bond + slash
14-tab governance surface per community
Session keys (25-day TTL by default)
POKE and OCT faucets on devnet
Bridge to Biont Network for handle bonding and earnings routing

#Next

Designed, partly built, not yet live.

iOS app (TestFlight first)
In-app embedded wallet so the 0xio extension is no longer required
Anonymous DMs end-to-end
Group rekey on member changes
Deniable messages
Faucet subsidies that pay the first action fees for new users
More provably-fair on-chain games (chess, dice, expanded duel modes)
Anonymous DM allowlist
Scheduled posts

#At mainnet

Shipping with the move to Octra mainnet.

Encrypted POKE. Part of the 1,000,000,000 (1B) POKE supply will be held under an upcoming Octra token standard that keeps balances and transfer amounts encrypted on chain. Encrypted POKE is the same token, the same supply ceiling, the same mint lock; it just lives in a privacy-preserving balance shape so transfers do not leak amount or counterparty. Pipoke wallets will show your clear POKE balance and your encrypted POKE balance side by side, with a "shield" toggle for sending in either mode.

#Long-term: HFHE and on-chain ML upgrades

Octra ships native homomorphic encryption opcodes and FP64 deterministic ML kernels. Pipoke uses almost none of them today. The thirteen items below lean on those primitives. Each is a meaningful social-layer upgrade, and several reshape what an on-chain social app can do that an off-chain one cannot.

#Upgrades to existing features

Confidential auction bids (HFHE sealed-bid second-price)

Bidders submit Pedersen commitments with range proofs. The contract computes second-highest on ciphertext. No reveal window. No bidders dropping out at reveal.

Encrypted social graph

Follow, block, mute, and close-friends edges as encrypted state. Bulk scraping "who follows X" stops working. You can still prove an edge when you choose to.

Sealed engagement metrics and private leaderboard

Your engagement weight is homomorphically aggregated. You see your own number. The period leaderboard decrypts only your row.

Sealed poker chip stacks

Opponents see ciphertext until showdown. Closes the basic "read the contract storage to see everyone's stack" hole that breaks serious play today.

Confidential poke amounts

The tip is visible (so the recipient is rewarded socially). The amount is encrypted. You can tip without broadcasting the size.

Encrypted reaction tallies

Total count visible. Who reacted stays private. Lets people react to sensitive content without exposing themselves.

Confidential community treasury operations

Pending spend proposal amounts as encrypted ciphertext until execute. Anti-MEV and anti-frontrun on community payouts.

Encrypted creator earnings dashboard

Your POKE inflow breakdown by post, drop, coin, and auction as encrypted state. Only your key decrypts the breakdown. Anti-doxxing for high-earning creators.

Sealed crash auto-cashout (PvP)

Commit your target multiplier as an encrypted commitment. Opponents cannot front-run your target. The contract evaluates at crash time.

On-chain AutoMod via a tiny classifier

Each community uploads a small toxicity, NSFW, or spam classifier (FP64 weights). Every post is scored at write time on chain and routed to the mod queue based on the score. Deterministic across nodes, no centralized AI provider, fully community-tunable.

Tier-gated anon posting

Bundle the Groth16 anon-set proof with a homomorphic rep-tier proof. The post reads "this was written by a member of the set who is at or above rep tier X" without revealing the wallet. Sensitive channels can gate by reputation without giving up anonymity.

On-chain semantic discovery

Post embeddings via on-chain matmul. Per-wallet feed ranking computed on chain from your own engagement vector. No platform can quietly retune your feed because the ranking function is a contract.

On-chain perceptual hashing for repost and theft detection

Compute perceptual hashes for images and short clips at write time. Reposts of identical or near-identical content are flagged automatically. No backend "trust and safety" tool needed.

#Later

Bigger lifts. Order may shift.

Android app
Octra Circles-hosted community PWAs (gated PWAs reached over oct://)
Multi-language UI
Follower-channel discovery
Decoy posts (cover-traffic for anon)
Biont breeding gameplay surfaces on the Pipoke side
Tier-weighted and time-weighted community voting

#How shipping order is chosen

What unblocks a 1,000-user beta on devnet goes first. Then what shrinks the surface of "you have to be on a desktop": iOS, the embedded wallet. After that, what raises the privacy floor: anon DMs, group rekey, deniable messages.