Projects
The Swiss Digital Commons Association champions digital foundations as a common good. Each project stands on its own yet follows the same principles: autonomy, verifiable openness, and a deliberate separation of development, operation, and governance. The association coordinates and safeguards — but never owns.
gitn.run
A sovereign, distributed, and end-to-end encrypted Git forge — built directly on the Korium fabric.
gitn.run serves Git over SSH with no central server: repositories are replicated across a mesh, quorum-coordinated, and reconciled by anti-entropy. Identity, transport, discovery, gossip, and authorization are provided directly by the Korium node — self-certifying did:korium identities, QUIC/mTLS transport, Kademlia discovery, Gossipsub, and Biscuit capability authorization.
The tight integration is deliberate: the project achieves properties usually reserved for far larger systems — automatic per-repository placement, hysteresis-stabilized membership, and quorum-based, linearizable ref updates. Content stays encrypted throughout, even against disk theft or passive storage compromise — carried by a globally scalable fabric.
Technically it is a single binary (gitnd): a Git-over-SSH endpoint (russh), authenticated by trusted user CAs (SSH certificates) and without a system git (in-process gix). Add to that signed epochs with quorum RPC and CAS-based ref updates, a cold tier with Reed-Solomon erasure coding (10+4 shards), and anti-entropy via Gossipsub plus periodic repo sync.
gitn.run is the first project fostered by the association: operated by independent nodes, transparently licensed under AGPLv3, and Swiss-grounded in its development, governance, and quality standards. Because every node must disclose its complete source code, running one is not a private act but a public, verifiable contribution — trust comes from proof, not from promises.
Korium
A cryptographic networking backbone — identity, transport, discovery, and authorization in a single zero-trust fabric.
Korium is a cryptographic networking backbone written in Rust. It unifies self-certifying Ed25519 identities, mutually authenticated QUIC (mutual TLS), NAT traversal, peer discovery, publish-subscribe, TCP tunneling, and Biscuit-token authorization into a single zero-trust fabric. Rather than treating discovery, transport, and messaging as separate subsystems glued together by application code, Korium couples them so that identity and freshness checks, rate limits, and resource bounds are enforced directly at the protocol edge.
Its trust model is a flat zero-trust mesh: no zones, no perimeters, no inherited authority. Every peer carries a did:korium identity — a BLAKE3-384 hash of its public key, with no certificate authority and no central registry. Every action requires an explicit, audience-bound, locally verifiable capability; nothing is implied by proximity, naming, or a successful connection. Key exchange is post-quantum hybrid (X25519 + ML-KEM-768), and the identity and wire formats are shaped so that a later move to post-quantum signatures stays a localized change rather than a redesign.
Korium is licensed under the AGPLv3.