PART OF THE MAINSTAY FAMILY
OakGate
More freedom in everyday life.
Connected to your community.
Leah stops at the market, pays for her groceries and greets a neighbour. Her community credits, everyday funds and membership records are close at hand and safe at home. A phone—or a paired card at a participating terminal—helps her get on with her day.
OakGate brings these everyday exchanges into a familiar place: Funds, Records and Receipts, with a trusted provider looking after the technical details. Leah can focus on being part of her community.
A custodial app built around safebox-acorn. Familiar sign-in, recovery kept close, and a path to independence when you choose.
Early development
OakGate supports sign-in, Acorn custody, Everyday Funds, Community Credits, records, wallet messages and POS workflows. Features have been exercised on the existing deployment; every new instance still needs configuration and acceptance checks. See project status for confirmed results and remaining work. The complete Go Independent workflow remains planned.
Managed by default. Independent by choice.
OakGate lets people use their safebox without managing keys and relay settings in everyday life. It retains encrypted wallet secrets and recovery material, and provides recovery disclosure after fresh authentication. Independent restoration still needs verification; disclosing recovery material does not end custody.
A familiar entrance
Sign in through Keycloak using the options your provider enables: Google, email and password, or an enrolled NFC card. Google is optional and replaceable.
Recovery kept close
Retain the keys, recovery phrase, bootstrap relay, and additional information needed to recover the same safebox independently.
Go Independent
The planned workflow will help you recover your safebox outside OakGate, end the relationship and request deletion of the information OakGate holds about you. Recovery disclosure is available now; the complete departure workflow is not.
Take it from here.
Go Independent is a design commitment: prepare the user to operate on their own before ending custody. The safebox remains intact. OakGate must explain what it deletes, what may remain temporarily, and why deletion cannot be independently proven.
User Experiences
Meet Project OakGate, the custodial version of Safebox, then see how it fits
into everyday life: a wallet holder pairs a card and pays
with a tap, while a small merchant equips several counters to receive Everyday Funds and
Community Credits into one wallet. The same terminals can now request and display whoami,
myinfo, emergency, health, benefits, member and pass records, including
category descendants. QR wallet approval and NFC support participating
remote homes.
Meet Project OakGate From a wallet to a card One wallet, several counters A city-backed food network Explore User Experiences
Independent homes. One connected experience.
Your app, card and a participating merchant's POS can work together even when operated by different OakGate homes. Signed requests connect payments, balance lookups and record presentations while each home retains its own users and custody. Acceptance policies and online connectivity apply; live deployment checks remain required.
Explore the connected experience How the homes work together
One family, different responsibilities
OakGate adds a managed experience around Acorn's capabilities. Safebox Web represents the approach where the application does not retain the user's nsec; OakGate intentionally takes on that custody. These are different choices about responsibility, not interchangeable interfaces.
Start with what works today
Run the FastAPI app locally with Poetry, or deploy its container alongside Keycloak on your own server. Containers are built on the deployment machine.