Safebox Web

A local-first application for user-controlled funds, records, and continuity.

Safebox Web helps people hold funds, manage private records, receive value, and present portable evidence while keeping control portable across apps and infrastructure.

The large balance is mint-confirmed and spendable. Incoming value stays visible as pending until it can be finalized.

Why Safebox Web? Radical Rewrite of Architecture View the source

A wallet app for funds, records, and evidence

Safebox Web gives people a practical place to create or connect a wallet, hold private records, receive value, share evidence, and recover continuity when surrounding services change.

Underneath the app is Acorn: the portable protocol state for keys, funds, records, and recovery. The design keeps application convenience separate from user authority, so Safebox Web can be replaced without replacing the wallet.

Safebox Web now makes a further distinction visible: one Cash Balance for sat-denominated payments and plural Clear Balances for transfers of organization-issued credits. The balances coexist in one wallet without being summed or presented as interchangeable.

Understand Cash and Clear Explore records and Wallet passes

Safebox Web is one interface for user-controlled funds, records, handles, and evidence.

Connect

Create a new wallet or connect one you already control using recovery words or a compatible private key.

Use

Work with relay-backed records, protected originals, handles, transaction history, receiving funds, direct Safebox payments, Lightning payments, and record sharing flows.

Verify

Connect private records to OpenETR evidence so exact artifacts can be checked against signed origin and control history.

Move

The wallet state remains portable. The app can be replaced without replacing the controlled key, relay-backed records, or recovery path.

Web-enabled but local-first under the hood

Safebox Web can feel like an ordinary web app: open it in a browser, use clear screens, scan QR codes, and share records. Underneath, the important state is not meant to belong to the web deployment.

Acorn publishes encrypted records through Nostr relays. A relay can store and serve a signed event, but it does not become the authority over what the record means. The authority that travels with the record is the cryptographic evidence of who published it, who can decrypt it, and which later signed events refer to it.

That lets records live anywhere suitable: a public relay, a community relay, a private relay, or a local Spurline relay inside a Lockbox. The web app is a convenient way to use the record. The record's continuity does not depend on that one web app remaining online.

Show arrival now, confirm spendability honestly

A payment does not need to disappear behind a spinner while every relay and mint operation finishes. Safebox shows incoming transfers as pending as soon as they are visible for the Acorn. Each arrival remains separate from the confirmed balance until Acorn establishes that its proofs are compatible, accepted by the mint, and safely persisted.

Arrival is visible

Relay evidence gives the user immediate assurance that a payment was sent to their Acorn.

Spendability is earned

The large balance changes only after mint confirmation and Acorn's proof compatibility checks.

Finalization can continue

Longer relay and mint work runs in the background. The user can return later without losing sight of what arrived.

Coordination is not custody

Safebox stores non-secret job progress, not the recipient's key, proofs, or private wallet state.

See how Safebox treats funds

Organization-issued value has reached the wallet

The current Clear milestone crosses the full delivery boundary:

Clear mint
  -> clear-lab treasury
  -> NIP-05 discovery
  -> private kind 7379 transfer
  -> Acorn pending wallet state
  -> Safebox Web Clear Balance

The recipient can explicitly check the relay for Clear transfers, inspect the mint and canonical CMU, use friendly program aliases, and delete a pending transfer without having it return on the next scan.

This is still a lab milestone. Acceptance into spendable Clear proof state and onward wallet spending remain under development.

Read about Cash and Clear

Part of the Mainstay product family

Safebox Web is an independently useful sibling in the Mainstay product family:

Safebox Web -> Acorn -> Spurline
                      -> Grove

        practical foundation for
                 Mainstay
                    |
             Lockbox appliance

It is useful as a hosted or self-hosted web app today, and it is the practical foundation for Mainstay, the future unified application. Lockbox is the hardware-first appliance intended to run Mainstay and its supporting services locally.

Good boundaries, not barriers. Safebox Web owns the human workflows, while Acorn, Grove, Spurline, mints, and other services retain their own authority and failure boundaries. Open protocols keep those boundaries interoperable so the app can coordinate continuity without becoming the wallet, relay, mint, or system of record.

Acorn
Protocol authority for keys, records, recovery, and value.

Grove
Blossom storage for opaque, content-addressed blobs.

Spurline
A local-first relay for individuals and communities.

Clear
Optional bounded local currencies for organizations and communities.

Mainstay + Lockbox
The future unified app and its hardware-first local appliance.

Built for continuity

Safebox Web is deliberately server-rendered, dependency-aware, and modest in what it asks the browser to do. The browser provides the session and progressive interactions. Acorn performs wallet and record operations. Relays, mints, Grove servers, and later local Lockbox services remain explicit replaceable dependencies.

Safebox Web uses two simple payment signals. The large balance is mint-confirmed and spendable. Incoming ecash from connected payment flows and Continuity Payments can remain pending until the user finalizes them. If a mint cannot be reached, the value stays pending rather than being presented as final.

Continuity Payments extend that model into local commerce. Safebox can transfer previously issued ecash directly to another Safebox address, including when mint access is interrupted. The recipient does not need a different receiving workflow: the payment appears as pending and can be finalized when the mint is available again. This working experiment is an important foundation for Mainstay across Connected, Local, Mobile, and Community modes.

Read the radical rewrite See how Safebox treats funds Read the product architecture Get started