What is planned
Where Palimpsest stands today, why nothing further is scheduled, and the things it is deliberately not going to do.
Where it stands
The full specification is implemented: the keystroke-path grammar and its canonicalizer, the two-hash enhancement mode, standalone and PAKE-backed modes, OPAQUE integration, rate limiting and lockout, a zero-dependency reference credential store, framework adapters, an accessible fallback flow, optional timing-biometric scoring, and an Auth0 integration with a verifier guard.
The canonicalizer — the trust root — is covered by property and fuzz tests.
Planned work
Nothing new is scheduled
Palimpsest is a specification that has been fully built, including the parts marked optional in it. There is no open work in the tracker and no queued feature. A scheme of this kind earns its next version from review and from deployment experience, not from a backlog written in advance.
Out of scope
Not on the roadmap
Said plainly, because the alternative is a sales conversation that ends in disappointment. If one of these is the thing you need, Palimpsest is not the product for it.
-
Replacing your identity provider
Palimpsest is a credential scheme that plugs into one. The Auth0 integration is the shape of that: a guard inside their Action, not a replacement for it.
-
A password manager
It changes what the secret is. It does not store secrets for you.
-
Security claims without review
The design, the threat model and the test strategy are written down so they can be argued with. Nothing here should be adopted on the strength of a product page.
How this is maintained
Every item above corresponds to work tracked in our own issue tracker, and this page is rewritten from that tracker rather than kept by hand. What is not shown: unfixed defects and security work, which belong in the tracker until they are closed, not on a product page.
Want the detail behind a line on this page, or a view of where something sits? Write to dmoore@dwmmholdings.com and ask.
Next
Build Palimpsest
The design is finished. Ask about implementing it, funding it, or taking it somewhere else.